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INTRODUCTION 


In this unit we complete the description of our formal system and start to 
discuss how to use it as a framework for proving theorems of number theory. 

In Unit 4 we introduced a formal language for number theory and in Unit 5 
we described what is meant by a formal proof. We also discussed the seven 
rules of proof that enable us to handle the connectives and the quantifiers of 
the formal language. In Section 2, we introduce the two remaining rules of 
proof, relating to the identity symbol, to complete the nine rules of proof of 
our formal system. 

By requiring that each of our rules is logically valid, we ensure that 
whenever we have a formal proof within our system showing that the 
formula ip can be derived from assumptions <p 1 , 0 2 , • • •, <P k , then ip is a logical 
consequence of (p l , 0 2 , ■ ■ ■ , <p k , that is, ip is true in every interpretation in 
which 0 lt 0 2 ,..., 0 fc are true. This is a consequence of the Correctness 
Theorem , which we shall discuss in Section 2. We shall also discuss a far 
more remarkable result, called the Adequacy Theorem, that our system with 
just these nine rules of proof is sufficiently powerful for the converse of the 
Correctness Theorem to hold, so that if ip is a logical consequence of 
0 l5 0 2 , • • •, <Afc then there is a formal proof deriving ip from the assumptions 
01) 02) • • • > 0fe- 

The economy of setting up our formal system with just nine rules is helpful 
from the point of view of obtaining theoretical results about the system and 
means that there are fewer rules whose correct application a machine would 
have to check. However, it has the down side that finding formal proofs can 
be tougher than if we had many more rules of proof. So, in Section 1, we 
discuss some useful strategies for finding formal proofs, including a powerful 
technique called proof by contradiction. 

The particular case of the Correctness Theorem when there are no 
assumptions says that if a formula ip can be derived from no assumptions, 
then ip is true in every interpretation, and hence ip is true in the standard 
interpretation jV. However, we clearly cannot expect the converse to hold. 
There are sentences which are true in JU, for example (O' + O') = 0", that we 
cannot expect to be derivable using no assumptions, as our rules of proof do 
not take into account the intended interpretation of the arithmetical 
symbols. Since our aim is to establish a formal system for number theory, we 
see that we still need to add some arithmetical axioms that encapsulate the 
basic properties of the operations of addition and multiplication of natural 
numbers. We do this in the Section 3 of this unit. We then explore, in 
Unit 7, some of the sentences of our formal language which can be derived in 
our formal system using these axioms as assumptions. 


This economy in drawing up the 
rules of proof corresponds to the 
economy that is normally practised 
in stating the axioms of algebraic 
structures. For example, when 
stating the group axioms, we need 
only specify the existence of an 
identity element. There is no need 
to stipulate in the axioms that it is 
unique, since we can deduce this 
fact from the axioms. Choosing a 
minimal set of axioms for groups 
reduces the amount of work needed 
whenever we want to check that a 
particular algebraic structure is a 
group. 


1 TECHNIQUES OF PROOF 

In this section we look at some techniques for obtaining formal proofs using 
the seven rules of proof introduced in Unit 5. 

We have already given some of these techniques in Unit 5. For example, if 
we are seeking to find a formal proof of a formula ip from the assumptions 
0j, 02 ,..., <p k , then a sensible starting point is to introduce the formulas 
<p 1 , 02,..., <p k as assumptions using the Assumption Rule (Ass). We have 
also noted that, when an assumption has the form Vu0, it is often a good 
move to use the Universal Quantifier Elimination Rule (UE) to remove the 
universal quantifier; and, when an assumption has the form 0, it is often 
a good idea to introduce <p> as an additional assumption with a view to 
eventually using the Existential Hypothesis Rule (EH). 
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Unit 4, Subsection 2.1. 


The logical form of the formula that we are trying to derive also gives a 
useful clue as to how to proceed. We see from the formation rules for 
formulas that, unless the desired conclusion is an atomic formula, it will 
have one of the forms -xp, ((p & ip), (<f> V ip), (</>—> ip), (cp ip),\jv (p or 3v <f>. 
In the examples in Unit 5 we have already indicated that the Universal and 
Existential Quantifier Introduction Rules (UI and El) are usually what is 
needed to derive formulas of the form Vi> (f> or ~\v cf). We also noted that, 
when it comes to deriving implications, that is, formulas of the form 
((f) —> ip), then the Conditional Proof Rule (CP) is usually helpful. 

We need to complete the picture by discussing strategies which are usually 
helpful when the formula we are trying to derive has one of the other forms, 
namely -i (p, (<f) & ip), ((p V ip) and (<p «-»• ip). In each case it is usually a good 
strategy to aim to use the Tautology Rule (Taut). Each use of this rule 
depends on a particular formula being a tautology. Often it will not be too 
difficult to see which tautology to use, but in some cases it will be less 
obvious. An important example of this latter kind occurs when we are 
trying to prove a negation, that is, a formula of the form -*p. 

We look at one very powerful technique for proving negations, known as 
proof by contradiction , in Subsection 1.1. Then, in Subsection 1.2, we look at 
strategies which are helpful when trying to prove formulas of the form 
((pSz ip) , (cp V ip) and ((p <-► ip), and summarize the techniques for obtaining 
formal proofs. To help use the Tautology Rule, it is very useful to know a 
few standard tautologies and we give some of these in Subsection 1.3. 


1.1 Proof by contradiction 

A very common and effective technique in everyday mathematics for proving 
that some statement is not true is to show that the assumption that it is 
true leads to a contradiction. This method of proof is called proof by 
contradiction or reductio ad absurdum. 

We used this method of proof in the example of an informal proof which we 
studied in detail at the beginning of Section 1 of Unit 5. In that case we 
wished to deduce from the assumption ‘n 2 is even’ the conclusion ‘n is even’. 
We did this by assuming that ‘n is odd’ and from this, after some work, we 
were able to deduce the contradiction ‘n 2 is odd and n 2 is even’, or 
equivalently that ‘n 2 is even and n 2 is not even’. From this we were able to 
draw the conclusion that, given the underlying assumption that ‘n 2 is even’, 
it follows that ‘n is odd’ is not true, that is, that ‘n is even’. 

This is a typical example of an informal proof by contradiction. We now 
look at it more closely from a formal viewpoint. 

A contradiction is the simultaneous assertion of a statement and its 
negation. The formal counterpart of this is a formula of the form (cp & -xp). 
Thus the formal counterpart of a proof by contradiction is the claim that if 
from ip and possibly other assumptions we can derive a contradiction 
(<p & -<(p) then from the other assumptions alone we can derive -*ip. We now 
give the argument which justifies this claim, and this argument yields the 
technique which we can often use to prove formulas of the form -■ ip. 




Suppose then that we have a formal proof of the contradiction (<p & -> <p) 
from the assumptions 61,62, ■■■ , 0 k and ip. This means that we have a formal 
proof whose last line has the form 

The rule of proof that has been 
used to obtain the last line of the 
formal proof is not relevant here, so 
we have simply written 
‘justification’ on the right of this 
line. 

t\, 1 2,..., ife, s (n) (<p & ->0) ‘justification’ 

ti,t 2 ,...,tk (n + 1 ) (ip -» (<pk -■</>)) CP ,n 

t\,t2, ■ ■ ■ ,tk (n + 2 ) -1 ip Taut,n + 1 

It is easily seen that we have made a correct use of the CP Rule on line 
n + 1 . One of the assumptions in force on line n is the formula ip. This is 
the assumption introduced on line s. Using the CP Rule enables us to drop 
this assumption, and to introduce ip as the antecedent of the implication on 
line n+1. 

On line n + 2 we have applied the Tautology Rule to line n + 1 . For this to 

be a correct use of this rule, we need to ensure that the formula 

((ip —► ( 4 > & ~'<p)) —*■ 'ip) is a tautology. To check this, we use a truth table: 
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T 

tautology 


We thus see that, having obtained a correct proof of the contradiction 
(<p & ~«p) from the assumptions 61,62 ,... ,6k and ip, it takes only two more 
lines to extend it to a proof of -up from the assumptions 61,62,... ,6k. 

This method for proving ->ip from the assumptions 61,62, ■■■ ,6k is the 
method of proof by contradiction. It is a very useful method for proving 
negations, and we shall shortly illustrate this with several examples. First, 
however, we consider how to go about deriving the contradiction (cp & ->0) 
on which this method depends. 

Since, clearly, the formula ((cp & -> 0 ) —> ( 0 & -> 0 )) is a tautology, to derive 
the contradiction (<p & -><p) it is sufficient to derive each of the formulas (p 
and -1 cp separately. For then a single use of the Tautology Rule enables us to 
derive (cp & -up). That is the easy part. The hard thing is the choice of the 
formula (p which gives us one half of the contradiction. If we are aiming at 
deriving -up from the assumptions 61,62 ,... ,6k, then cp needs to be chosen 
so that we can derive both <p and -<<p from the assumptions 6\, 62, ■ ■ ■, 6 n and 
ip. There is no automatic rule for choosing the formula <p, given 
61,62 ,... ,6k, ip, but in many cases there are clues which lead us to a choice 
of (p for which the derivation of the contradiction (<p & ~<<p) from the 
assumptions 61,62 ,... ,6k and ip is not too difficult. This is best illustrated 
by some examples, and we now turn to these. 


ti,t 2 ,.. ■ ,tk,s ( n ) (0&-i0) ‘justification’ 

where ti, <2, • ■ ■, ifc, s are the numbers of the lines on which the formulas 
61,62 ,... ,6k and ip have been introduced as assumptions. If we now make 
one use of each of the Conditional Proof and Tautology Rules, we can 
achieve our desired conclusion: 
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Example 1.1 

We show that, for all formulas <p, 

3v -> (j) I —<\/v <p 

Our starting point is the standard one. Since we want to derive -iVu <p from 
the assumption 3v we introduce this latter formula as an assumption. 
Next, our experience from the previous unit suggests that, to derive -iVv cp 
from this assumption, we should aim to deduce it from the assumption -«p, 
and then use the EH Rule. To this end we introduce -up as an assumption 
on line 2. We now turn our attention to the formula we are aiming to derive, 
namely -iVu (p. Since this is a negation, we try to derive it using proof by 
contradiction. This involves introducing Vu <j> as an assumption with a view 
to deriving a contradiction. This gives the first three lines of our formal 
proof as follows. 


1 

(1) 

3u -up 

Ass 

2 

(2) 


Ass 

3 

(3) 

Mv<p 

Ass 


We are now seeking to derive a contradiction. Two thoughts now come 
together. First, since we have -■ <p on line 2, to complete the derivation of a 
contradiction all we need is to be able to derive <j> on a subsequent line. 
Second, we note that the formula Vv <j> occurs on line 3, and that the UE 
Rule enables us to derive from it the formula <p. Thus it looks as though we 
can achieve our aim, and indeed we do this as follows. 


1 

(1) 

3u —>(p 

Ass 

2 

(2) 

-'(/> 

Ass 

3 

(3) 

Vu(/> 

Ass 

3 

(4) 

4> 

UE, 3 

2,3 

(5) 

(<p k -> cp ) 

Taut, 2,4 

2 

(6) 

(Vv <p (<pk ->(p )) 

CP, 5 

2 

(7) 

-A /vp 

Taut, 6 

1 

(8) 

-A tv(p 

EH, 7 


We have used the proof by contradiction method on lines 6 and 7. The use 
of the EH Rule on line 8 is legitimate as the variable v cannot have any free 
occurrences in the formula -A/v cp. ♦ 

Example 1.2 

We show that, for all formulas <p and ip, 

Vu (ip — * ► 4>) b (3u -«f> — > -iVu ip) 

Our starting point is the standard one. Since we wish to derive 
(3v~i<p —> -i Vvip) from the assumption Vw (ip — > <p), we introduce this latter 
formula as an assumption on line 1. Next we turn our attention to the 
formula (3i> -> <p — > ->'ivip ) which we are aiming to derive. Since this is an 
implication, we adopt the standard strategy and make the assumption 3w ->(p 
with a view to deriving the conclusion -A/i; ip and then using the CP Rule. 
Again, as is also standard when we have an existential formula as an 
assumption, we also introduce as an assumption the formula without the 
initial existential quantifier, with a view to using the EH Rule. If we do this, 
the first three lines of our formal proof are as follows. 


1 

(1) 

Vu (ip —> <p) 

Ass 

2 

(2) 

3u -i <p 

Ass 

3 

(3) 

~‘<P 

Ass 
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Now we need to remember that our aim is to derive -A/u '</’ from the 
assumptions 1 and 2, and then use the CP Rule to derive (3v-«p —> -kvip) 
from assumption 1 alone. Since ->Vv ip is a negation, we make the further 
assumption Vu ip and aim to use proof by contradiction. Thus we add the line 

4 (4) Vv ip Ass 

to the above three lines. Now, we are trying to derive a contradiction. We 
note that we have the formula -«p on line 3, and thus we would achieve our 
aim of deriving a contradiction if we could also derive </>. There seems to be 
no immediate way to do this. However, another standard strategy now 
comes into play. Our formal proof now includes two universal formulas, on 
lines 1 and 4. We can use the UE Rule to drop the universal quantifiers from 


these formulas. We thus now have the following. 

This proof exploits what will, with 

1 

(1) 

Vu (ip —> (p) 

Ass 

experience, be a typical procedure: 
peel off as many of the quantifiers 

2 

(2) 

LU 

J 

Ass 

as possible from the assumptions 

3 

( 3 ) 

~«P 

Ass 

and hope then to be able to derive 
a contradiction. 

4 

( 4 ) 

'ivip 

Ass 


1 

( 5 ) 

(ip-xp) 

UE, 1 


4 

(6) 

ip 

UE,4 



We need to keep in mind that our current aim is to derive cp so that, 
together with the formula ~«p on line 3, we have our desired contradiction. 


At this stage there is no obvious way we can make progress by using any of 
the quantifier rules. It is therefore sensible to see if we can use the 
Tautology Rule to derive the formula (p which we are aiming for. Is this 
formula a tautological consequence of formulas that have already occurred in 
our proof? You might recognize that (p is a tautological consequence of the 
formulas ip and (ip <p). It is easy to check that the formula 
((ip k (ip —> (p)) —> <p) is a tautology and hence we can use the Tautology 
Rule to derive <p from ip and (ip —» <p). 

This leaves us in a position to complete the formal proof using proof by 
contradiction. We do this as follows. 


1 

(1) 

Vu (ip —> cp) 

Ass 

2 

(2) 

-up 

Ass 

3 

( 3 ) 

~'<P 

Ass 

4 

( 4 ) 

Vvtp 

Ass 

1 

( 5 ) 

(iP 4 ,) 

UE, 1 

4 

(6) 

ip 

UE, 4 

1,4 

( 7 ) 

<P 

Taut, 5,6 

1,3,4 

(8) 

(cp k ~«p) 

Taut, 3,7 

1,3 

( 9 ) 

(Vvip —> (<pk ~*p)) 

CP, 8 

1,3 

(10) 

Wvip 

Taut, 9 

1,2 

(11) 

-A/u ip 

EH, 10 

1 

(12) 

(3v~i<p —> -i Vvip) 

CP, 11 


We have used the proof by contradiction method on lines 9 and 10. The use 
of the EH Rule to derive line 11 from line 10 is legitimate since the variable 
v cannot have any free occurrences in either the formula -kv ip or the 
assumption other than -\<p on which line 10 depends, namely the formula 
Vu (ip -► <p). 
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To help you recognize such 
tautological consequences, we 
some standard tautologies in 
Subsection 1.3. 


compressed into one. You can check that (((-«p & ip) & (ip —► </>)) —> (<p & -i<p)) 
is a tautology. Hence after line 6 we could, using the Tautology Rule, derive 
(<p & -xp) from lines 3, 5 and 6. This would give line 7 as 

1,3,4 (7) (cpfo-xp) Taut, 3,5,6 

and the proof could then be completed with lines 9, 10, 11 and 12 
(renumbered 8, 9, 10 and 11) and with the appropriate modifications to the 
line references in the justification column. This corresponds to one’s 
experience in everyday mathematics, where, once a proof of a theorem has 
been found, it is frequently possible to find ways to simplify it. However, as 
our concern here is with using standard techniques to find formal proofs, we 
shan’t usually be bothered about trying to shorten our proofs. 

Problem 1.1 _ 

(a) Show that, for all formulas <p, 

3vcp I—iVu —xp 

(b) Show that, for all formulas <p and ip, 

Vv <j>, 3v -iip I —>Vv (<p —> ip) 


Note that, when we were deciding how to achieve the desired conclusion (p 
on line 7, it helped to be able to recognize that 0 is a tautological 
consequence of the formulas ip and (ip —* <p). However, even if you were not 
sure what to do at this stage, you could have guessed that <p was a 
tautological consequence of ip and (ip —> <p) and you could have then 
confirmed this by using the standard truth table method to check that 
((ip & (ip —► (p)) —> <p) is indeed a tautology. ♦ 

In fact, we could have saved one line in the formal proof in Example 1.2 by 
noting that the two uses of the Tautology Rule on lines 7 and 8 could be 


Proof by contradiction can also be used to derive formulas which are not 
negations. Our previous examples rely on the fact that the formula 

(<P&-«P)) -^->ip) 

is always a tautology. It is easily checked that 
((“■ (<pk-«p)) -up) 

is also a tautology. It follows that if we can derive a contradiction from the 
assumptions 61 , 62 ,... ,0k and -tip, then by using the CP Rule and the 
Tautology Rule we can derive ip from the assumptions 61 , 62 , ■■■ , 6 k- This 
method can be used to derive a formula ip whatever the logical form of ip, 
and thus is always worth a try if no other method seems to be available. 
The next example shows this method in use. 




Example 1.3 

We show that, for all formulas 0, 
-dv ->0 h Vu 0 


Note that assuming Sv -up and 
->Vv 0 and trying to derive a 
contradiction doesn’t get anywhere. 

We are seeking to derive a contradiction. We already have a negation on 
line 1 and we will thus have achieved a contradiction if we can also derive 
3t? ->0. It should then strike us that we can use the El Rule to derive this 
formula. We can then use the proof by contradiction method. We are thus 
led to the following formal proof. 


1 

(1) 

-i3v -i(p 

Ass 

2 

(2) 


Ass 

2 

(3) 

3v -i(p 

El, 2 

1,2 

(4) 

(3v -i <p & -du -i0) 

Taut, 1,3 

1 

(5) 

(—Kp — » (3w -i0 & —dl> -i0)) 

CP, 4 

1 

(6) 

<P 

Taut, 5 

1 

(7) 

Vw0 

UI, 6 


The use of the UI Rule to derive line 7 is correct as the variable v does not 
occur freely in the formula -du -i0 which is the assumption in force on 
line 6. ♦ 

Sometimes one has to be extra careful about the formula one obtains for the 
contradiction, especially when the next step of the proof is a use of the EH 
Rule, as the next example illustrates. 


In line with our standard strategy, we begin our formal proof by introducing 
the assumption -dv —Kp. We now aim to derive Vv 0. We adopt the usual 
strategy for deriving universal formulas, that is we aim to derive 0 and then 
to use the UI Rule. How can we derive 0? There is no immediately obvious 
way to do this. In this situation, it is worth aiming to give a proof by 
contradiction on the lines indicated above. To do this we introduce the 
formula ->0 as an assumption and try to derive a contradiction. If we adopt 
this strategy, we will have written the following two lines. 

1 (1) -du-i 0 Ass 

2 (2) ->0 Ass 


Example 1.4 

The incorrect proof below is an attempt to show that, for all formulas 0 
and ip, 

(p, Vu (->ip V -i <p) I—d vip 
where the variable v does not occur freely in cp. 


1 

(1) 

<P 

Ass 

2 

(2) 

Vu (-10 V -i0) 

Ass 

3 

(3) 

3vip 

Ass 

4 

(4) 

fp 

Ass 

2 

(5) 

(-nip V -10) 

UE, 2 

1,2 

(6) 

-tip 

Taut, 1,5 

2,4 

(7) 

(ip & -up) 

Taut, 4,6 

2,3 

(8) 

(ip & -up) 

EH, 7 

1,2 

(9) 

(3u ip —+ (ip & -up)) 

CP, 8 

1,2 

(10) 

P 

m 

r 

Taut, 9 


Warning! This is not a correct 
proof! 
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As —~3v ip is a negation, our strategy is to add the assumption 3v ip to the 
assumptions <p> , Vu (-iip V -Kp) and try to derive a contradiction. As the extra 
assumption is an existential formula, we also assume the formula without its 
existential quantifier, preparatory to a use of the EH Rule. We use the UE 
Rule to drop the universal quantifier from one of the other assumptions. We 
then derive a contradiction on line 7. Up to this point, the proof is correct. 
But there is a mistake on line 8. A correct application of the EH Rule to the 
formula on line 7, to replace assumption 4 by assumption 3, requires that 
the variable v does not occur freely in the formula on line 7 or in any of the 
assumptions, besides 4, on this line, namely assumptions 1 and 2. We are 
told that v doesn’t occur freely in <j>, which is assumption 1. Assumption 2 is 
the formula Vw (-up V -Kp), in which there are no free occurrences of v thanks 
to the initial Vu. But there is no guarantee that v does not occur freely in 
the formula (ip & —••0), so we cannot use the EH Rule to obtain line 8. 


We can, however, rescue the proof by deriving the contradiction (cp & ~i(p), in 
which the variable v does not occur freely, instead of (ip & -i ip ), which we can 
do using different tautologies for lines 6 and 7, as follows. 


1 

(1) 

<t> 

Ass 

2 

(2) 

Vu (~np V -<(p) 

Ass 

3 

(3) 

3vip 

Ass 

4 

(4) 

ip 

Ass 

2 

(5) 

(-up V -<(p) 

UE, 2 

2,4 

(6) 

-.0 

Taut, 4,5 

1,2,4 

(7) 

(<p & ~Kp) 

Taut, 1,6 

1,2,3 

(8) 

(<P & ~Kp) 

EH, 7 

1,2 

(9) 

(3vip — ► ((p & -Kp)) 

CP, 8 

1,2 

(10) 

-i 3vip 

Taut, 9 


As v does not occur freely in <p, it doesn’t occur freely in the formula 
(<f> & -i(p) on line 7 or in either of assumptions 1 and 2, so the use of the 
EH Rule on line 8 is now correct. The proof by contradiction method then 
leads to the desired result. ♦ 


The condition that v does not 
occur freely in <f> is vital for this 
proof. If the condition is dropped, 
it is no longer always valid to infer 
ip from the assumptions <p and 
Vv (-up V -i <p). There is further 
discussion of this issue once we 
have stated the Correctness 
Theorem in Subsection 2.2. 


An alternative way to rescue our 
first attempt at a proof is to take 
its first seven lines and use the 
Tautology Rule with the tautology 
((ip & -iip) —> (<p & - i(p )) to infer 
(<p & -Kp) on line 8, depending on 
assumptions 1, 2 and 4. Then finish 
off the proof with the last three 
lines of the adjacent proof with line 
numbers suitably adjusted. 


Problem 1.2 _ 

(a) Show that, for all formulas (p and ip, 

Vu (-i <p —*• ip), -i3v ip\-\/vcp 

Hint: Introduce -Kp as an extra assumption and aim for a contradiction. 

(b) Show that, for all formulas <p and ip, 

(p, 3v (ip —> -i(p) I—iVu ip 
where the variable v does not occur freely in (p. 


1.2 Techniques for finding formal proofs 

In this subsection we gather together standard techniques which are useful 
in finding formal proofs. Most of these techniques have already been used in 
earlier examples. Before we give a systematic list of these techniques, we 
discuss a few cases which we have not previously covered. 
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Disjunctions 

Recall that by a disjunction we mean a formula of the form (cp V ip). Our 
standard technique for proving formulas of this form is based on the fact 
that (cp V ip) is a tautological consequence of the implication {-<(p —> ip). This 
follows from the fact that, for all formulas cp and ip, the formula 

((-,</> -> ip) ->■ (<p V ip)) 

is a tautology, as is shown by the following truth table. 


((- 

<t> 

- 

ip) 

- 

( <t> 

V 

VO) 

0 

1 

1 

1 

1 

1 

1 

1 

0 

1 

1 

0 

1 

1 

1 

0 

1 

0 

1 

1 

1 

0 

1 

1 

1 

0 

0 

0 

1 

0 

0 

0 


It follows that, if we have a formal proof of the formula (-1 <p —> ip) from a 
given set of assumptions, then a single use of the Tautology Rule enables us 
to extend it to a formal proof of (cp V ip) from the same set of assumptions. 

We already have a technique which helps us to find a formal proof of an 
implication such as [p<p —► ip). It is to add -> </> to the list of assumptions and 
then aim to derive ip. Then, by using the CP Rule, we obtain a formal proof 
of (-i<p : —> ip) from the other assumptions. Thus, the observation that (<p V ip) 
is a tautological consequence of (-<<p —> ip) means that we can use essentially 
the same strategy to derive disjunctions. 


Example 1.5 

We show that, for all formulas <p, 
b (Bn -1 (p V Vu cp) 

Using the technique described above for deriving disjunctions, we aim to 
derive first the implication (->3 v-vp —► Vu cp). We shall be able to achieve 
this if we can derive Vw <p from the assumption -i3v -xp. This is something we 
have already done in Example 1.3. Thus all we need to do in the present 
case is to add two lines to the formal proof of Example 1.3. On one line we 
use the CP Rule to get the required implication and then on the next line, 
by using the Tautology Rule, we obtain the formal proof of the disjunction. 
In this way we obtain the following formal proof. 


Recall that the absence of any 

formulas to the left of the turnstile 

symbol, b, indicates that there is a 

formal proof of which the last line 

consists of the formula 

(3n -1 <p V Vv <p) depending on no 

assumptions. 


1 

(1) 

->3u —1<^> 


Ass 

2 

(2) 

-,0 


Ass 

2 

(3) 

-o- 

r 

m 


El, 2 

1,2 

(4) 

(3u -<(p & -"3v -i<p) 

Taut, 

1 

(5) 

(-!(/> — ► (3i> —><^> 

& ->3u -1 (p)) 

CP, 4 

1 

(6) 

<P 


Taut, 

1 

(7) 

Wv<p 


UI, 6 


(8) 

(->3u -■ <p — > Vu 

<t>) 

CP, 7 


(9) 

(3u -*p\/Vv(p) 


Taut, 


Problem 1.3 _ 

Show that, for all formulas <p, 

b (BvcpWv ->0) 
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Bi-implications 

By a bi-implication we mean a formula of the form (cp <-> ip). The following 
truth table shows that, for all formulas <p and ip, the formula 

(((<A ip) & (ip -*■</>)) ->(<£<-► ip)) 
is a tautology. 


m 

- 

ip) 

& 

(ip 

- 

<p)) 

- 

{<p 


VO) 

i 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

i 

0 

0 

0 

0 

1 

1 

1 

1 

0 

0 

0 

1 

1 

0 

1 

0 

0 

1 

0 

0 

1 

0 

1 

0 

1 

0 

1 

0 

1 

0 

1 

0 


It follows that the formula (cp ip) is a tautological consequence of the two 
formulas (<p —> ip) and (ip —> <p). Thus a standard technique for deriving an 
bi-implication of the form (cp <-> ip) is to derive each of the implications 
(<p —> ip) and (ip —> <p) separately, and then derive (<p ip) by a single use of 
the Tautology Rule. Normally our technique for deriving the implication 
(<p —i ip) will be to assume <p, aim to derive ip and then use the CP Rule. 
Similarly to derive (ip —> (p ) we shall usually assume ip, aim to derive (p and 
then use the CP Rule. 

Example 1.6 

We show that, for all formulas (p and ip, 

(- ((-,<£_► ip) <-*■ ((p v ip)) 

We have already noted that (cp V ip) is a tautological consequence of 
(->(p —up). So it requires just one use of the Tautology Rule to derive 
(<p V ip) from (-■ cp —» ip). It easily checked that, conversely, (-> <p —* ip) is a 
tautological consequence of (</> V ip), and so we can adopt the same strategy 
for deriving (~xp —* ip) from (cp V ip). This leads to the following formal proof. 

1 (1) (-■<p — * ip) Ass 

1 (2) (<p V ip) Taut, 1 

(3) ((-.<£->^>) -*• (<pWip)) CP,2 
4 (4) (cp V ip) Ass 

4 (5) (~n/> —> ip) Taut, 4 

(6) ((<p Vip)-> -► ip)) CP, 5 

(7) ((-«p-np) ~ ((pVip)) Taut, 3,6 4 

Problem 1.4 _ 

Show that, for all formulas <p and ip, 

P (-'((p &tip) <-> (-i (p V -up)) 

We are now ready to gather together the different techniques for finding 
formal proofs. Some of them depend on considering the logical form of the 
assumption formulas. Others are based on looking at the logical form of the 
formula that we are aiming to derive from the given assumptions. 
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Suppose that we are aiming to derive a conclusion ip from a given set of 
assumptions , <p 2 , ■ ■ ■, <Pk- 

(Tl) Begin by using the Assumption Rule to introduce each of the 
formulas <p 1 ,(p 2 ,... ,(p k 35 assumptions. 

(T2) When an assumption begins with one or more universal quantifiers, 
use the UE Rule to eliminate these quantifiers. 

(T3) When an assumption is an existential formula of the form 3w 9, 

introduce 8 as an assumption with a view to a later use of the EH Rule. 

(T4) When the desired conclusion ip is a negation of the form -i 8 , introduce 
9 as an assumption, aim to derive a contradiction, and then use the 
proof by contradiction method. 

(T5) When the desired conclusion ip is a conjunction of the form (8 & x)> 
aim to derive each of the formulas 8 and x separately, and then use 
the Tautology Rule to derive {8 & x). 

(T6) When the desired conclusion ip is a disjunction of the form (6 V x), aim 
to derive the implication (-id —> x); and then use the Tautology Rule 
to derive (6 V x)- 

(T7) When the desired conclusion ip is an implication of the form (9 — * x)> 
introduce 8 as an assumption, aim to derive arid then use the 
CP Rule. 

(T8) When the desired conclusion ip is a bi-implication of the form (9 <-> x) 
aim to derive each of the implications (8 —> x) and (x —» 9) separately, 
and then use the Tautology Rule to derive (9 <-» x)- 

(T9) When the desired conclusion ip is a universal formula of the form Vw 9, 
aim to derive 9, and then use the UI Rule. 

(T10) When the desired conclusion ip is an existential formula of the form 
3v 9, aim to derive 9(t/v) for some term r, and then use the El Rule. 

(Til) Remember that crucial steps in a derivation are often provided by use 
of the Tautology Rule. 

(T12) If you are trying to derive a formula 8 and nothing else seems to work, 
try using the proof by contradiction strategy of assuming ->9 and 
aiming to derive a contradiction. 

Example 1.7 

We show that, for all formulas (p and ip, 

-i(p, \/v(cp V ip) P 3n ip 

Following (Tl) we begin by introducing the following two assumptions. 

1 (1) 3 v-i(p Ass 

2 (2) Vv (cp V ip) Ass 

We are guided by (T3) and (T2), respectively, for lines 3 and 4. 

3 (3) -i cp Ass 

2 (4) ((p V ip) UE, 2 

Next, we turn our attention to the desired conclusion, 3 vip. (T10) suggests 
that we should aim first to derive ip and then to use the El Rule. Since none 
of the earlier techniques seems to offer any hope of further progress, we turn 
our attention to (Til) and look to see if we can use the Tautology Rule to 
derive ip from formulas that we already have. 


You might find it useful when you 
review your work so far, for 
instance when revising for the 
exam, to see how these techniques 
have been used in earlier examples 
in this unit and in Unit 5. 


For example, in many proofs one 
uses techniques (T2) and (T3) to 
peel off quantifiers from the 
assumptions in order to obtain 
formulas without quantifiers to 
which the Tautology Rule is then 
applied, for instance to obtain a 
contradiction. 
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By thinking about the meaning of the connectives it should not be difficult 
to spot that ip is a tautological consequence of the formulas ->0 and (<p V ip) 
on lines 3 and 4. This can be confirmed by checking that the formula 
((-'<p & (<p V ip)) —> ip) is a tautology. We can thus add the following line. 

2,3 (5) ip Taut, 3,4 

Now we can complete the proof in the way we have planned. 

2,3 (6) 3vip El, 5 
1,2 (7) 3vip EH, 6 

The complete proof is as follows. 


1 

(1) 

-i0 

Ass 

2 

(2) 

Vn (0 V ip) 

Ass 

3 

(3) 

-’0 

Ass 

2 

(4) 

(0V0) 

UE, 2 

2,3 

(5) 

iP 

Taut, 3,4 

2,3 

(6) 

ip 

El, 5 

1,2 

(7) 

3v ip 

EH, 6 


Problem 1.5 _ 

Show that, for all formulas <p and ip, 


♦ 


Note that the order of these last 
two steps cannot be reversed. An 
application of the EH Rule to 
line 5 would not be valid as, in 
general, ip will contain free 
occurrences of the variable v. 


(0 —> ip), cp h 3vip 


Example 1.8 

We show that, for all formulas <p and ip, 

3v <p, Vv (ip —» -i <p) I —<\/vip 

Following (Tl) we begin our proof in the obvious way. 

1 (1) 3vp Ass 

2 (2) Vi> (ip —i -i cp) Ass 

The next steps are in line with (T3) and (T2), respectively. 

3 (3) <p Ass 

2 (4) UE, 2 

Now we turn our attention to the desired conclusion, -Hv ip. Since this 
formula begins with the negation symbol, we shall aim to follow (T4). T his 
leads to the following line. 

5 (5) Vvip Ass 

Since this latest assumption begins with a universal quantifier, our next 
move is to follow (T2) and remove it. 

5 (6) ip UE, 5 

We are aiming to derive a contradiction. We already have <p on line 3, so we 
shall obtain a contradiction if we can also derive -«p. The Tautology Rule 
will almost certainly be needed, and we should be able to spot that -i <p is a 
tautological consequence of the formulas on lines 4 and 6, since 
((ip & (ip —> -i0)) —► -i0) is a tautology. So we are able to continue as follows. 

2,5 (7) -i0 Taut, 4,6 

2,3,5 (8) (0 & —’0) Taut, 3,7 

Having obtained a contradiction, we can apply the proof by contradiction 
method as planned. 

2,3 (9) (Vvip-+ (0&-.0J) CP, 8 

2,3 (10) -Wvip Taut, 9 
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Since the variable v has no free occurrences in either the formula ->Vu ip on 
line 10 or the assumption \/v (ip —» ->0) on line 2, we can now complete the 
proof by making the intended application of the EH Rule. 

1,2 (11) -tivip EH, 10 

Thus the complete proof is as follows. 


1 

(1) 

3v <p 

Ass 

2 

(2) 

Vu (ip — ♦ -«p) 

Ass 

3 

(3) 

(p 

Ass 

2 

(4) 

(V> -*• -■ <P) 

UE, 2 

5 

(5) 

~ivip 

Ass 

5 

(6) 

ip 

UE, 5 

2,5 

(7) 

-'(p 

Taut, 4,6 

2,3,5 

(8) 

(<p k <p) 

Taut, 3,7 

2,3 

(9) 

(Vvip —> (<pk -‘(p)) 

CP, 8 

2,3 

(10) 

-\\/v ip 

Taut, 9 

1,2 

(11) 

-iVu ip 

EH, 10 


Problem 1.6 _ 

Show that, for all formulas <p and ip, 

Vw (p , 3v (ip —+ -«p) I—' Vvip 


Example 1.9 

We show that, for all formulas <p, ip and 9, 


\/v 6, 3v (-i (p V ip)\~ (Vv <p —► -iVu -‘(ip k 9)) 

We begin our proof in the standard way by introducing the two given 
assumption formulas and then using (T2) and (T3) as appropriate. 


1 

(1) 

\/v9 

Ass 

2 

(2) 

3v (-‘(p V ip) 

Ass 

1 

(3) 

9 

UE, 1 

4 

(4) 

(~«P V ip) 

Ass 

Next we turn our attention 

to the formula (V« (p > ~^ v “’(V-' k 9) ) that 


are aiming to derive as a conclusion. Since this is an implication we make 
use of (T7) to obtain the following line. 

5 (5) Vw <p Ass 

Now, following (T7), we are aiming to derive ->Vu -‘(ip k 9). Since this begins 
with the negation symbol, we follow (T4) to introduce one more assumption, 
namely the desired conclusion with the initial negation symbol omitted. 

6 (6) Vu -‘(ip k 9) Ass 

We now aim to derive a contradiction. Since the last two assumptions we 
have introduced begin with universal quantifiers, we follow (T2) to get the 
next two lines. 

5 (7) <p UE, 5 

6 (8) -'(ip k 9) UE, 6 

How can we achieve a contradiction? There is more than one possibility 
here, but one way is to note that we have a negated formula -‘(ip k 9) on 
line 8 and hence we would obtain a contradiction if we could also derive 
(ip k 9), and we would be able to achieve this if only we could derive each of 
the formulas ip and 9 separately. We already have 9 on line 3, so all we need 
to do to achieve our aim is to derive ip. 
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Note that on line 4 we have (->0 V ip) and on line 7 we have 0. The formula 
ip is a tautological consequence of these formulas, since the formula 
((0 k (-,0 V ip)) —> ip) is a tautology, as you can easily check. 

We can thus achieve our aim of getting a contradiction as follows. 

4,5 (9) ip Taut, 4,7 

1,4,5 (10) (0&0) Taut, 3,9 

1,4,5,6 (11) {{ip k 6 ) k ^{ip k 0)) Taut, 8,10 

We can now complete our strategy of using proof by contradiction. 

1,4,5 (12) (Vv-.(0&0)-»((0&0)&-.(0&0))) CP, 11 

1,4,5 (13) -.Vt/-.(0&0) Taut, 12 

We can now apply the CP Rule as saw we intended when we used (T7) to 
introduce Vv <p as an assumption on line 5. 

1,4 (14) (W0-* -.Vw-i(0&0)) CP, 13 

Finally we complete the proof with a use of the EH Rule, as we intended 
when we used (T3) to create line 4. 

1,2 (15) (Vu0-> -Hv^{ipk0)) EH, 14 

It should be evident that this use of the EH Rule is valid. 


Thus the complete proof is as follows. 


1 

(1) 

Vv0 

Ass 

2 

(2) 

(-,0 V 0) 

Ass 

1 

(3) 

0 

UE, 1 

4 

(4) 

(-.0 V 0) 

Ass 

5 

(5) 

Vu0 

Ass 

6 

(6) 

Vv -‘{ip k 6) 

Ass 

5 

(7) 

0 

UE, 5 

6 

(8) 

'(0 & 0) 

UE, 6 

4,5 

(9) 

0 

Taut, 4,7 

1,4,5 

(10) 

(0 k 0) 

Taut, 3,9 

1,4,5,6 

(11) 

((0&0)&-(0&0)) 

Taut, 8,10 

1,4,5 

(12) 

(Vu -1 (0 & 0) —> ((0 & 0) & -,(0 k 0))) 

CP, 11 

1,4,5 

(13) 

-iVu —‘{ip & 0) 

Taut, 12 

1,4 

(14) 

(Vn 0 —> -iVn -<{'ip & 0)) 

CP, 13 

1,2 

Problem 1.7 _ 

(15) 

(Vu 0 —* ->Vw -‘{ip k. 0)) 

EH, 14 


Show that, for all formulas 0, 0 and 0, 

Vu (0 —> 0), 3v (0 V -i0) I- (Vu 0 —> ->Vu ->(0 k 0)) 


The practical question of how to spot the appropriate tautologies when 
seeking to find formal proofs is an important one. Most proofs involve a use 
of the Tautology Rule at some stage, and this requires being able to 
recognize when this rule can be applied. We discuss this in more detail in 
the next subsection, where we list some standard cases. 


You may recall that we used 
essentially the same tautology in 
Example 1.7 to derive line 5 of the 
proof given there. 


In this example, the last two steps 
in the proof could have been 
carried out in the reverse order. 

We could have applied the EH Rule 
to line 13 and then the CP Rule. 
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1.3 Some standard tautologies 

We have seen that in most formal proofs we need to use the Tautology Rule 
at least once. Use of this rule depends on being able to spot when a formula 
we are aiming to derive is a tautological consequence of formulas that have 
already occurred in a proof. In theory this is a straightforward problem, as 
there is an algorithm for deciding the matter. The formula ip is a 
tautological consequence of (p 1 ,<p 2 ,... ,(p k if and only if the formula 

((• • • ((0 X & 0 2 ) & 0 3 ) • • • &: <t>k) -*■ VO 

is a tautology, and this can be determined using the truth table method. 

However, from a practical viewpoint, we don’t want to spend a lot of time 
checking formulas which turn out not to be tautologies. So in this subsection 
we list a number of standard cases of tautological consequence which are 
frequently useful. We also indicate a method for checking whether formulas 
of the above form are tautologies that is often more efficient than calculating 
the full truth table. 

We begin with a simple example to explain the notation we are going to use. 
We have already seen that, for all formulas 0 and ip, the formula (0 & ip) is a 
tautological consequence of 0 and ip. Thus, whenever two formulas 0 and ip 
occur in a proof, we can derive the formula (0 & ip) on any subsequent line. 
When we do this the formula (0 & ip) will depend on all the assumptions in 
force on the two lines on which the formulas (p and ip occur. We indicate this 
by writing 

0,0 
(0 & ip) 

In general, we shall write 

0i, 02, • ■ • ? 0fc 
iP 

to indicate that the formula ip is a tautological consequence of the formulas 

01 > 02, • ■ • ! 0k ■ 

Here then is our list of some standard cases of tautological consequence 
which are often useful. In each case, the claim that it is a tautological 
consequence can be justified by checking that the corresponding formula is a 
tautology. 


1 

0 , 0 

2 

(0 & 0 ) 

3 

( 0 & 0 ) 

(0&VO 

0 

0 

4 

(0 V Ip ), ->0 

5 

(0 V Ip), 10 




0 


0 



6 

(—'0 V 0 ), 0 

7 

(0 V 10), ip 



0 

0 



8 

(0 0 ), 0 

9 

(0 -> 0 ), -.0 

10 

(0 — 0 ), (0 -*• 0 ) 

0 

-10 

( 0 - 0 ) 

11 

(0 — 0 ) 

12 

(0 — 0 ) 

13 

(0 — 0 ), (0 — 0 ) 

(0 —> 0 ) 

(0 -*• 0 ) 

(0 0 ) 

14 

(0 —► 0 ) 

15 

(-,0 -► -’ 0 ) 



(—'0 -*• -’ 0 ) 

(0 — 0 ) 



16 

(0 -*• -. 0 ) 

17 

(-.0 -> Ip) 



(0 — -' 0 ) 

(“>0 — 0 ) 



18 

1 *0 

19 

0 

20 

(0 & - 10 ) 

0 


-.-.0 


0 
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Many of the tautologies used in the logical proofs in Unit 5 and in this unit 
are from this standard list. For example, in Example 1.9, standard 
tautological consequence 6 is used on line 9, standard tautological 
consequence 1 is used on lines 10 and 11, and standard tautological 
consequence 9 is used on line 13. You may care to look out for where these 
standard tautological consequences are used later in this unit and in 
subsequent units. 

We have already noted that to decide whether a formula ip is a tautological 
consequence of the formulas <f> 1 , <p 2 , ■ ■ ., <p k we need to check whether the 
formula 

((• • • ((( i> x Sc <t> 2 ) & fa) • ■' & <Pk) -*■ 0 ) ( 1 . 1 ) 

is a tautology. One way to do this is to calculate the full truth table of the 
formula (1.1). However, a good deal of the work that this involves can be 
saved by taking advantage of the form of (1.1) as an implication. If any of 
the formulas (j> 1 , cp 2 , ■ ■ ., cp k has the truth value 0, then, using the truth table 
for Sc, we see that the conjunction (• ■ ■ ((<p 1 Sc <p 2 ) Sc cp :i ) ■ ■ ■ Sz <p k ) also has the 
truth value 0. It then follows that the whole formula (1.1) has the truth 
value 1, as is readily seen from the truth table for —>. Thus there is no need 
to work out in full any line of the truth table for (1.1) in which any of the 
formulas , <p 2 ,..., cp k has the truth value 0. Another way to put this is 
that, in checking to see whether (1.1) is a tautology, we need only consider 
those cases in which each of (f> 1 , <p 2 ,..., <p k has the truth value 1. 

We illustrate this by returning to Example 1.9. The three successive uses of 
the Tautology Rule on lines 9, 10 and 11 in that example could have been 
replaced by a single use of this rule given by the line 

1,4,5,6 (9) ((ip Sc 9) &-.(V>& 6)) Taut, 3,4,7,8 

This is because the formula ((ip Sc 9) Sc -<(ip Sc 9)) is a tautological 
consequence of the formulas 9, (->cp V ip), <p and -<(ip Sc 9). To justify this 
claim, we need to check whether the formula 

((((0 Sc (~<(p V ip)) Sc (p) Sc ->(ip Sc 9)) —> ((ip Sc 9) Sc -i( ip Sc 9))) 

is a tautology. The full truth table for this formula has eight lines, but we 
need only check those lines in which 9, (-«p V ip), cp and -<(ip & 9) are all 
true. In particular 9 and cp must both get the truth value 1 , and so we need 
only check two lines of the truth table, according to whether ip is true or 
false. We do this now. 

((((6 Sc (-i <p V ip)) Sc <p) Sc -> (ip Sc 9)) —> ((ip Sc 9) Sc —i (ip Sc 9))) 

11 011 1 11 00 111 1 111 00 111 

10 010001 01 001 1 001 01 001 

®®@®@ ® ©®©®®@®® ®©®®®®@® 

From column © we see that the whole formula always has the truth value 1 
and hence is a tautology. 

Problem 1.8 _ 

Show that, for all formulas <p, ip and 9, the formula ~>(ip 6) is a 

tautological consequence of the formulas cp, (~«p V ip) and -^9. 


In our formal system, the Tautology Rule validates any deduction where one 
formula is a tautological consequence of other formulas. There are infini tely 
many different ways of using this rule, since there are infinitely many 
different tautologies of the form (1.1). However, in practice, we make use of 
a rather small set of simple special cases of this rule, such as those listed 
earlier as standard cases of tautological consequence: 


You may also care, perhaps during 
revision for the exam, to work out 
where these standard tautological 
consequences have been used in the 
logical proofs in Unit 5 and earlier 
in this unit. 


The proof would then continue 
with lines 12 to 15 of Example 1.9, 
suitably renumbered. 


As the formula is so complicated, 
we have included the order in 
which we have worked out the 
truth values of the columns. Note 
that once we have discovered that 
all the values in the column 
labelled with © are 0, we know 
that the final values in column (f) 
must all be 1. 
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2 THE FORMAL SYSTEM COMPLETED 


In this section, we shall complete our formal system by giving rules for 
handling the identity symbol =. Plainly such rules will be vital for proving 
statements of number theory, which are fundamentally built up using the = 
symbol. We shall also discuss two very important results about the formal 
system, the Correctness Theorem and the Adequacy Theorem, which 
connect what can be derived within the system with logical consequence. 


2.1 Identity rules 

In Unit 5 we introduced the rules of proof of our formal system which deal 
with the connectives and the quantifiers. We now complete the formal 
system by describing two rules relating to the identity symbol: an 
introduction rule and a substitution rule. 

The introduction rule is very straightforward. It is based on the principle 
that anything is identical to itself. 


Definition 2.1 Identity Introduction Rule (II) 

For each term r, the formula 
r = r 

may be written down on any line of a formal proof, and does not 
depend on any assumptions. 


Example 2.1 

We show that 
F Vu v = v 

The following formal proof establishes this claim. 

(1) v = v II 

(2) Vvv = v UI,1 

Note that since line 1 does not depend on any assumptions, the use of the 
UI Rule on line 2 is legitimate since, vacuously, the variable v does not occur 
freely in any of the assumptions on which line 1 depends. ♦ 

As we can use the Identity Introduction Rule on any line of a formal proof, 
it shares with the Assumption Rule the property that it can be used on the 
first line of a proof. None of the other rules of our formal system has this 
property. So each formal proof must start with either a use of the 
Assumption Rule or a use of the Identity Introduction Rule. 

The second rule for the identity symbol corresponds to the principle that 
‘equals can be substituted for equals’. That is, if two terms T\ and r 2 have 
been shown to be equal in the sense that we have derived the formula 
t 1 = T 2 , and, for some formula cf>, we have also derived the formula <P(t\/v), 
then this principle suggests that we should be able to substitute 12 for T\ 
and hence derive the formula <^>( 72 /v). 

There is, however, a technical difficulty, in terms of logical validity, in 
transferring this principle into a rule of our formal system. This is because 
there may be variables in T\ or T 2 that become bound when one of these 
terms is substituted for the variable v in (f >. Here is an example of what can 
happen. 


The rule is plainly logically valid 
and it is easy to see that a machine 
could check whether a formula has 
this form. 


We met a similar technical 
difficulty when introducing the 
UE Rule in Unit 5. 
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Let (j> be the formula 

3 yy= (z + O') 

and let n and t 2 be the terms 0" and (y + O'), respectively. Then n = r 2 is 
the formula 

0 " = (» + 0 / ) ( 2 . 1 ) 

4>{ti/x) is the formula 

3yy=(0" + 0') (2.2) 

and ^(t 2 /x) is the formula 

3yy = ({y + o / ) + o') (2.3) 

Formula (2.1) is true in the standard interpretation ./f if we interpret the 
variable y as referring to the number 1. Formula (2.2) is also true in yf, but 
formula (2.3) is not true in this interpretation. What has gone wrong is that 
the variable y in the term (y + O') becomes bound in formula (2.3). 

To avoid this difficulty, we need to ensure that t\ and r 2 are freely 
substitutable in <f>, so that no variables become bound. 


This rule can be shown to be 
logically valid. It is easy to see that 
a machine could check whether the 
rule has been applied correctly. 


We now give some examples of formal proofs which make use of the identity 
rules. 

Example 2.2 

We show that 

I- VxVt/ (a; = y —* x' = y') 


1 (1) 

x = y 

Ass 

(2) 

x' = x' 

II 

1 (3) 

x' = y' 

Sub, 1,2 

(4) 

H 

II 

1 

II 

CP, 3 

(5) 

Vy (x = y ->• x' = y') 

UI, 4 

(6) 

Vx Vj/ (x = y —> x' = y') 

UI, 5 


In terms of the notation used in stating the Substitution Rule, we have the 
following. The formula (f is x' = x', t\ is the term x and r 2 is the term y. 
Thus the formula on line 1 is rj = r 2 . The formula on line 2 is 4> l . It may be 
regarded as having been obtained from (j> by replacing the second occurrence 
of the variable x by the variable x. Then <j> 2 , the formula on line 3, is 
obtained from <f> by replacing the second occurrence of x by an occurrence 
of y. 

More briefly, the use of the Substitution Rule is justified since the formula 
on line 3 is obtained from the formula on line 2 by substituting the variable 
y for the second occurrence of x, and x = y is the formula on line 1. ♦ 


Definition 2.2 Substitution Rule (Sub) 

Suppose n and r 2 are terms which may be freely substituted for the 
variable v in the formula cf. Let cj) 1 be a formula which results when 
some (but not necessarily all) of the free occurrences of v in <j> are 
replaced by ri , and let </> 2 be the formula which results when these 
same occurrences of v are replaced by r 2 . Then, if on two lines of a 
formal proof the formulas t\ = r 2 and <fi l occur, on any subsequent line 
we may introduce <j) 2 , which will depend on all the assumptions in force 
on the lines on which the formulas Ti = r 2 and 4> 1 occur. 
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Example 2.3 

We show that 

l- Vx Vy (x = y —► y = x) 


1 (1) 

x = y 

Ass 

(2) 

X = X 

II 

1 (3) 

y-X 

Sub, 1,2 

(4) 

S3 

II 

1 

II 

CP, 3 

(5) 

Vy (x = y -> y = x) 

UI, 4 

(6) 

Vx Vy (x = y —*■ y = x) 

UI, 5 


The use of the Substitution Rule on line 3 is justified since the formula on 
this line is obtained from the formula on line 2 by substituting the variable y 
for the first occurrence of x, and x = y is the formula on line 1. ♦ 

Problem 2.1 _ 

Establish the following. 

(a) b VxVy Vz (x = y -> (z + x) = (z + y)) 

(b) b VxVyVz (x = y —> (y = z —> x = z)) 


There is a feature of the Substitution Rule that we need to be careful about, 
and which is alluded to in the solution to Problem 2.1(b). The order of the 
terms T\ and 72 in the statement of the rule in Definition 2.2 is critical for a 
correct use of the rule. Put somewhat loosely, given T\ = 72 the rule allows 
us to substitute r 2 for Ti, but it does not permit the substitution of T\ for T 2 . 
The following will make this distinction more precise. The first three lines of 
the proof of Example 2.2 are as follows. 

1 (1) x = y Ass 

(2) x' = x' II 
1 (3) x' = y' Sub, 1,2 

These three lines constitute a formal proof which shows that 
x = y b x' = y'. However, to show that y = x b x' = y', which is indeed 
true, it is not enough to replace the formula x = y on line 1 by y = x. This 
would give the following ‘proof’. 

1 (1) y = x Ass 

(2) x' = x' II 
1 (3) x' = y' Sub, 1,2 

The use of the Substitution Rule on line 3 is not correct. The formula on 
line 3 has been obtained from that on line 2 by substituting y for the second 
occurrence of x, and it is claimed that this substitution is justified by the 
occurrence of the formula y = x on line 1. However, this is not a 
substitution which the Substitution Rule allows. If we apply this rule to the 
formula y = x, we are only allowed to use it to substitute x for occurrences 
of y but not the other way round. 

Since a rule which also permitted substitutions in the other direction would 
also be logically valid, you may wonder why we formulated the Substitution 
Rule to permit substitutions just in one direction. It is a matter of economy 
in setting up our formal system, a point we remarked on in the Introduction 
to this unit. Substitutions in the other direction are easily catered for using 
our Substitution Rule since, if we are given the formula T\ = T 2 and want to 
substitute t\ for 72 , rather than T 2 for n, in some other formula, we can 
always first derive the formula 72 = T \, by an adaptation of the first three 
lines of the proof in Example 2.3, as follows. 


Warning! This is not a correct 
proof! 


We ask you to give a correct formal 
proof to show that y = x b x' = y' 
in Problem 2.2(a). 
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1 (1) 7"i = r 2 Ass 

(2) 71=71 II 
1 (3) r 2 = ri Sub, 1,2 

We can then use the Substitution Rule to substitute ri for t 2 in some other 
formula, provided that all the requirements of the rule are satisfied. 

With care, the restrictions of the Substitution Rule need not be too great, as 
the following example shows. 

Example 2.4 

We show that 

x = y\- ((x + y) + x) = ((y + x) + y) 

Of course, we start the formal proof in the standard way by introducing the 
formula x = y as an assumption. The next step is to find a term r such that, 
by substituting y for some of the occurrences of x in the formula t = r, we 
obtain the formula ((x + y) + x) = ((y + x) + y) at which we are aiming. If 

we achieve this, we can use the II Rule to introduce the formula r = r into 

our proof, and we can then achieve our desired conclusion by a single use of 
the Substitution Rule. We hope that you will agree that we have made the 
optimum choice of the term r. 

1 (1) x = y Ass 

(2) ((x + x) + x) = ((x + x) + x) II 

1 ( 3 ) ((a; + y) + x) = ((y + x) + y) Sub, 1,2 

The formula on line 3 has been obtained from that on line 2 by substituting 
y for the second, fourth and sixth occurrences of x. This is a legitimate use 
of the Substitution Rule since we have the formula x = y on line 1. ♦ 

Plainly, formal proofs of theorems about number theory are going to involve 
more complicated uses of the Substitution Rule than those we have seen in 
this subsection. We shall see such uses in Unit 7, when we discuss formal 
theorems in the system Q, the axioms of which we shall introduce in 
Subsection 3.2. 

Problem 2.2 _ 

Establish the following. 

(a) y = x h x' = y' 

(b) x = y h ((;y -x)-y) = ((x -y)-x) 


2.2 Correctness and adequacy 

You have now met all nine rules of proof of our formal system: the 
Assumption Rule (Ass), the Tautology Rule (Taut) and the Conditional 
Proof Rule (CP), introduced in Section 1 of Unit 5 ; the Universal Quantifier 
Elimination Rule (UE) and the Universal Quantifier Introduction Rule (UI) 
introduced in Section 2 of Unit 5; the Existential Quantifier Introduction 
Rule (El) and the Existential Hypothesis Rule (EH) introduced in Section 3 
of Unit 5; and the Identity Introduction Rule (II) and the Substitution Rule 
(Sub), introduced in the previous subsection. The nine rules of proof, 
together with the formal language and its rules discussed in Unit 4, complete 
our description of our formal system. So it is now time to discuss some 
important results about the system. 

Recall that, in Section 1 of Unit 5, we said that the formal proofs of our 
formal system should be machine-checkable and logically valid. 
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For a formal proof to be machine-checkable, it is sufficient that each step of 
the proof be machine-checkable. This will be the case provided that, for each 
rule of proof, there is an algorithm for determining whether it has been 
applied correctly. We hope that our informal discussions of this issue in 
Unit 5 and in this unit have convinced you that such algorithms exist. We 
shall not go into any further detail here. 

We do, however, need to look at the logical validity of formal proofs in more 
detail. Recall that a formal proof of a formula ip from assumptions 
(p 1 ,(p 2 , ■ ■ ■ ,(pk i s logically valid provided that ip is a logical consequence of 
the formulas cp 1 , <p 2 , . ■ ., </>*., in other words provided that ip is true in every 
interpretation in which each of the formulas <p x , (p 2 ,..., <p k is true. Implicit 
in this definition is the fact that the set of assumptions is finite. Later, 
however, when investigating possible sets of axioms for number theory, we 
shall want to consider infinite sets of assumptions. To this end, we need to 
amend our definition of logical consequence, and for good measure to 
provide a formal definition of derivation. 


Definition 2.3 Derivation and logical consequence 

Let S be a set of formulas and ip a formula. 

We say that ip is derivable from S if there is a formal proof of ip from 
assumptions which are all in the set S. Such a proof is called a 
derivation of ip from S. 

We say that ip is a logical consequence of S if ip is true in every 
interpretation in which all the formulas of S are true. 


A key point to note is that any formal proof is finitely long, so that, even if 
S is infinite, a proof of ip from S uses only finitely many assumptions 
from S. There is a further, subtle, issue in the case when the set S is 
infinite: is there an algorithm for checking whether a given derivation of ip is 
a derivation from 5? Since our formal system is machine-checkable, we know 
that there is an algorithm which will check whether the derivation is correct 
and which will identify the assumptions on which ip depends. But if S is 
infinite, there might not be an algorithm for checking whether these 
assumptions are in 5 — this issue will underly much of our subsequent work 
on using the formal system for number theory. 

In light of our new, extended, definition of logical consequence, we should 
now state that, in order to show that the formal proofs of our system are 
logically valid, we need to show that, if ip is derivable from assumptions in a 
set S, then ip is a logical consequence of S, that is, ip is true in every 
interpretation in which all the formulas of S are true. As before, the method 
for doing this is to show that, in a formal proof, the formula which appears 
on a given line is always a logical consequence of the assumption formulas on 
which that line depends. However, we don’t need to check each formal proof 
individually: as was discussed in Unit 5, it is sufficient to check that each of 
the nine rules of proof of our formal system is logically valid, in other words 
that whenever a rule is applied to earlier lines on which the formula is a 
logical consequence of the assumptions, this remains true for the line of the 
proof obtained using the rule of proof in question. We have already checked 
this, in Unit 5, for the Assumption, Tautology and Conditional Proof Rules. 
As we have indicated in Unit 5 and in this unit, it is possible to check that 
all the other rules of proof also have this property, though, since the 
arguments generally involve a number of not very illuminating technical 
details relating to free occurrences of variables, we have omitted them: we 
hope that our informal discussions of these rules make it plausible that they 
are logically valid. Taking this on trust, we are able to state the following 
theorem. 


A full proof that the proofs of our 
formal system are 
machine-checkable would involve 
translating this requirement into 
the language of recursive functions, 
and checking that the relevant 
functions are recursive, in an 
analogous way to that in which we 
discussed URM computations in 
Unit 3. 


Recall that, in the Introduction to 
Unit 5, we informally equated the 
idea of derivation with that of 
formal proof. 


The set S may be infinite. 

Note that this covers the case 
where we have a formal proof of ip 
from no assumptions. 


When S is finite, there is no 
problem. The formulas in S can be 
put in a finite list and any 
assumption can be compared with 
each formula in the list in finitely 
many steps. 


For the details of the arguments, 
consult the Suggestions for Further 
Reading in Unit 8. 
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Theorem 2.1 Correctness Theorem 

If 5 is a set of formulas and xp a formula such that xp is derivable from 
S, then xp is a logical consequence of S. 

In particular, it follows from this theorem that if xp is a formula which is 
provable from no assumptions, that is I- xp, then xp is true in every 
interpretation of our formal language. 

Problem 2.3 _ 

Show that it is not the case that, for all formulas (p, 
h (Vx 3y <p —> 3y Vx <p) 


The Correctness Theorem tells us that if xp is xiot a logical consequence of S 
then there cannot be a formal proof of xp from assumptions in S. Thus, if we 
can spot that xp is not a logical consequence of S, then we know that there is 
no point in trying to derive xp from S. For example, suppose we want to try 
to prove -du 6 from the assumptions (p and V?; (~<0 V ->(p). To see that there 
is no point in trying to do this, suppose that 9 is the formula v = 0 and that 
(p is the formula -<v = 0 . The formula Vi> (-■ 9 V -></>) becomes 
Mv (~>v = 0 V -i-i v = 0 ), which is true in all interpretations. However, in the 
standard interpretation jU, if we give v the value 3, say, then both <p and 
Vv (-i 9 V -i0) are true but -Bv9, which is the formula -Bvv — 0 , is false. 
Thus -3v v = 0 is not a logical consequence of <p and V?; (-> 9 V ->(p) and so 
there would be no point in trying to derive ->3v v = 0 from these 
assumptions, as the Correctness Theorem tells us that no such formal proof 
can exist. 

It is natural to ask if the converse of the Correctness Theorem is true. If the 
formula xp is a logical consequence of the set of formulas S, does it follow 
that xp is derivable from S? That is, will there necessarily be a formal proof 
of xp from finitely many assumptions (p x , <p 2 ,.. ■, (p k in 5? This is a deep 
question which amounts to asking whether our formal system is adequate for 
deriving all logical consequences that can be derived within our system. 
Indeed, more than 50 years elapsed between the first formulation of a system 
of formal logic similar to that presented here (published by Frege in 1879) 
and the proof that the answer to our question is ‘yes’ (published by Gddel 
in 1930). In fact, it took some time for the question about the adequacy of 
the system even to be asked! 

Because of the difficulty of the proof, we content ourselves just with stating 
the theorem which gives the answer to our question. 


Theorem 2.2 Adequacy Theorem 

If S is a set of formulas and xp a formula such that xp is a logical 
consequence of S , then xp is derivable from S. 


In this and other examples, it is 
sometimes possible to ensure that 
xp is a logical consequence of S by 
restricting the free occurrences of 
certain variables. In this example, 
if v does not occur freely in <p, then 
—9 is a logical consequence of <p 
and Vi> (-10 V -i cp), as we saw in 
Example 1.4. 


For a proof, consult the Suggestions 
for Further Reading in Unit 8. 
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At this point we need to remind ourselves that the main focus of our interest 
is number theory. We seek to develop the formal system so it can prove 
results of number theory. At the moment we are unable to give formal 
proofs of such obviously true statements of number theory as 

\/x (x + O') = x' 

But this is not surprising. None of our rules makes any reference to the 
standard interpretation of the arithmetical symbols. Indeed we have made 
sure that our rules are logically valid, so that the formulas we can prove 
without any assumptions are those which are true in all interpretations. The 
formula above, though true in the standard interpretation JT, is not true in 
every interpretation. Hence it is not possible to derive it in our system 
without using any assumptions. So we need to add some ‘axioms for 
arithmetic’ which express the basic properties of the arithmetical symbols. 
We begin this task in the next section. 


3 AXIOMS FOR NUMBER THEORY 


In this section we shall explain how to use our formal system to prove some 
non-trivial statements of number theory. This requires us to make precise 
what we mean by a theory and by the axioms and theorems of a theory, 
which we do in Subsection 3.1. Subsection 3.2 then gives some axioms for a 
fragment of number theory. 


3.1 Theories and theorems 

In everyday mathematics the term ‘theory’ is frequently used, but is not 
precisely defined. We speak, for example, of ‘the theory of groups’, ‘chaos 
theory’ or, indeed, ‘number theory’. In our work in mathematical logic, 
‘theory’ has a precise definition. 

Our definition of a theory depends on the notion of a sentence, by which, as 
you may recall, we mean a formula of the formal language that contains no 
free occurrences of variables. The lack of free occurrences of variables in 
sentences makes them very useful since this property ensures that, in any 
given interpretation of the formal language, a sentence $ is either always 
true or always false: there are no free variables in $ for which we need to 
provide values in order to determine the truth or falsehood of the formula. 
Furthermore, we can use sentences in formal proofs without having to worry 
about whether they satisfy the conditions on free variables that apply in 
some of the rules of proof. These attractive properties explain why we base 
our definition of a theory upon them. 


Definition 3.1 Theory, axioms, theorems 

Let S be a set of sentences of the formal language. The set of all 
sentences which are derivable in the formal system from assumptions in 
the set S is called the theory of S and written as Th(S'). S is said to 
be a set of axioms of the theory. 

A set of sentences T is said to be a theory if it is Th(S') for some set of 
sentences S. The sentences which are in T are called theorems of T. If 
a sentence $ is a theorem of T, we indicate this by writing 

h t d? 


We adopt the practice of using 
capital Greek letters for sentences. 


A theory can have several different 
sets of axioms. See Example 3.1. 


In some books, the sentences in T 
are called theorems of the set S of 
axioms. 
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It follows from the Correctness and Adequacy Theorems that a sentence T is 
derivable from S if and only if 'F is a logical consequence of S, so we could 
equally well define the theory Th(S) as the set of all sentences which are 
logical consequences of S'. It is sometimes more convenient to establish 
results about theories using logical consequence rather than derivability 
within the formal system. For instance, any theory T is closed under 
derivation, as we show using logical consequence in the following theorem. 


Theorem 3.1 Closure under derivation 

Let T be a theory. Then, for all sentences IF, if 'F is derivable from T 
then $eT. 


Proof 

Let the theory T have as axioms the set of sentences 5, so that T = Th(5). 
Suppose *F is a sentence derivable from T. For T to be in T, we need to 
show that *F is derivable from S. 

As T = Th(S') consists of all sentences which are logical consequences of S, 
then, for any interpretation in which all sentences of S are true, all sentences 
of T are true. As T is derivable from T, then, by the Correctness Theorem, 
^ is a logical consequence of T, so that in this interpretation \F is true. 

Thus *F is a logical consequence of S and, by the Adequacy Theorem, 
derivable from S, so is in Th(S') = T. ■ 

Problem 3.1 ___ 

Let 5 be a set of sentences. Show that every sentence iF in S is in the theory 
Th(S). 


It is useful to have a special name for an interpretation in which all the 
theorems of a theory are true. 


Definition 3.2 Interpretation of a theory 

An interpretation of a theory T is an interpretation of the formal 
language in which all the theorems of the theory are true. 


Part of the proof of Theorem 3.1 shows that, if 5 is a set of sentences, then 
any interpretation of the formal language in which all the sentences of S are 
true is also an interpretation of the theory Th(S). This can be rephrased as 
the following theorem. 


Theorem 3.2 

If T is a theory with axioms S, then any interpretation of the formal 
language in which all the sentences of S are true is also an 
interpretation of T. 


l F is the Greek letter ‘capital psi’. 


If you would like to try your hand 
at proving Theorem 3.1 directly 
using the formal system, rather 
than going via the Correctness and 
Adequacy Theorems, look at 
Additional Exercise 2 for Section 3. 
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Example 3.1 

If the set S is empty, then Th(S) consists of those sentences 'f such that 
I- \&, that is, such that is derivable from no assumptions. Th(S) is not 
empty: for example, it follows from Example 2.1 that the sentence Vx x = x 
is in Th(5). 

If S' is the set consisting of just the one formula Vxx = x, the theory Th(5') 
is equal to Th(S'). It is perhaps easier to explain this in terms of logical 
consequence than in terms of the formal proof system. Suppose that the 
sentence \& is in Th(5'), which means that v k is a logical consequence of 
Vxx = x. As Vx x — x is true in all interpretations of the formal language, it 
follows that 'P is also true in all interpretations and is thus in Th(S). 
Conversely, any sentence in Th(S) is a logical consequence of the empty set 
of sentences, and thus of any other set of sentences, in particular of S', and 
is thus in Th(5'). ♦ 


Equivalently Th(S) consists of all 
sentences true in all interpretations 
of the formal language, and can be 
described as the set of theorems of 
quantifier logic (i.e. obtained solely 
from the nine rules of proof, 
without any special assumptions). 


Example 3.1 illustrates that different sets of axioms, in this particular case 
the empty set and the set consisting of the sentence Vxx = x, can give rise 
to the same theory. 


Theorem 3.3 

Let J? be an interpretation of the formal language. Let T be the set of 
all sentences which are true in JK. Then T is a theory. 


Proof 

To show that T is a theory, we need to identify a set of sentences S for 
which T = Th(5). In this case, one suitable set S is T itself and we shall 
show that T = Th(T). 

By Problem 3.1, every sentence in T is in Th(T’). To show the converse, 
suppose that the sentence 'I' is derivable from T. Then it follows from the 
Correctness Theorem that 'I' is a logical consequence of T. Hence, as all the 
sentences in T are true in the given interpretation, so also is \P. Hence 

Thus T = Th(T), which shows that T is a theory. ■ 

One instance of Theorem 3.3 is of particular importance. This is the case 
where the interpretation in question is the standard interpretation xC. The 
sentences true in JT correspond to what in everyday mathematics we would 
call the truths of number theory. We give this theory a special name. 


The reason why we use the word 
‘complete’ in this name will emerge 
shortly. 


Theories like Complete Arithmetic which consist of all sentences that are 
true in some particular interpretation have two important properties. Let T 
be such a theory. Given any particular interpretation of the formal language 
and any sentence f I>, then precisely one of the two sentences $ and ->$ is true 
in the given interpretation. Thus one important property of T is that either 
hy $ or \~t ->$, and the other is that we cannot have both hr $ and b t 

We now give two general definitions corresponding to these two properties, 
starting with the second. 


Definition 3.3 Complete Arithmetic 

Complete Arithmetic is the theory that consists of all those sentences 
of the formal language that are true in the standard interpretation JT. 
We shall use the abbreviation CA for this set of sentences. 
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Definition 3.4 Consistency 

A theory T is said to be consistent if there is no sentence $ of the 
formal language such that both h T $ and b T 


If a theory T is not consistent, so that there is some sentence $ such that 
both \~t $ and hr ->$, then T has no interpretations, as no sentence can be 
both true and false in an interpretation. That means that a theory which 
has an interpretation is consistent. In particular, Complete Arithmetic is 
consistent. 

Problem 3.2 __ 

Prove that if T is a theory which is not consistent then every sentence of the 
formal language is a theorem of T, that is, show that for each sentence we 
have hr 'P Hint: Recall, from Subsection 1.3, that, for all sentences $ and 
T, the sentence (($ & -i$) —> Ik) is a tautology. Use this to show how to 
construct a derivation of 'h. 


Our second general definition is as follows. 

Definition 3.5 Completeness 

A theory T is said to be complete if, for every sentence $ of the formal 
language, either hr $ or hr ->4>. 


Problem 3.3 _ 

Prove that if T is a theory which is both complete and consistent then, for 
every sentence $ of the formal language, precisely one of hr $ and h T 
holds. 


Prom the discussion preceding Definitions 3.4 and 3.5, we see that Complete 
Arithmetic (CA) is a complete and consistent theory. 

It should be noted that the consistency of the theory CA has no bearing on 
Hilbert’s Question, which we mentioned at the beginning of Unit 1 and 
again in the Introduction to Unit f. Hilbert asked whether the consistency 
of number theory can be proved using only non-dubious principles of finitary 
reasoning. An argument for the consistency of number theory which is based 
on the existence of the standard interpretation, which is an infinite 
mathematical object, certainly does not meet Hilbert’s requirement of a 
consistency proof which only uses finitary reasoning. 

Leibniz’s Question, which we mentioned along with Hilbert’s Question, asks 
if there is an algorithm for deciding which statements of number theory are 
true. This question can now be reformulated in terms of the theory CA as 
follows: 

Is there an algorithm for deciding which sentences of our formal 
language are in the set CA? 

We still cannot answer this question. However, to help us answer it later, 
you should find it plausible that we should search for a finite set of axioms 
for the theory CA. We begin the search for such a set of axioms in the next 
subsection. 


It can be shown that the converse 
is also true: every consistent theory 
has an interpretation. 


The fact that it is a complete 
theory explains its name. 


We shall have to wait until Unit 8 
for an answer to Hilbert’s Question. 


We answer Leibniz’s Question in 
Unit 8 too. 


We already have an infinite set of 
axioms for the theory CA, namely 
CA itself. This follows from 
Theorem 3.3 when T is CA. 
However, such an infinite set does 
not help us to answer Leibniz’s 
Question. 
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3.2 The theory Q 

We noted at the end of Subsection 2.2 that to be able to derive theorems of 
number theory, that is, sentences true in the standard interpretation, we 
need to introduce some axioms which express properties of this 
interpretation. The only sentences derivable in our formal system from no 
assumptions are those which are true in all interpretations; to be able to 
derive other sentences, we need to add some axioms which we can use as 
assumptions. 

We thus seek a set S of sentences which we can use as axioms for number 
theory, and we then consider the theory Th(S) consisting of all the sentences 
that we can derive using the sentences in 5 as assumptions. 

When it comes to choosing the axioms which make up S there are a number 
of criteria that we aim to satisfy. 

1 All the axioms in 5 should be true in the standard interpretation JV. 

2 There should be an algorithm to determine whether a given sentence is 
in S. 

3 We should be able to derive as many theorems as possible from the 
axioms. 

4 The set of axioms should be as simple as possible. 

The first two of these criteria are precise requirements for our set S of 
axioms. By Theorem 3.2, criterion 1 will ensure that all the theorems 
derived from the axioms are true in the standard interpretation, so that (by 
the remark following Definition 3.4) the theory Th(f>) is consistent. Since we 
require number theory to be consistent, criterion 1 is clearly an essential 
requirement for any set of sentences which could be considered as a set of 
axioms for it. Criterion 2 will ensure that there is an algorithm for deciding 
whether a purported proof is really a proof in our formal system of a 
formula ip from assumptions which are all axioms in S. Thus criterion 2 is 
another essential requirement. 

Criteria 3 and 4 are not quite so precise and they pull us in opposite 
directions: criterion 3 suggests that a large set of axioms might be sensible 
whereas criterion 4 suggests that we should look for a small set. In fact, the 
ideal way to achieve criterion 3 would be to find a set of axioms which meets 
criteria 1 and 2, and which enables us to derive as theorems all sentences 
true in the standard interpretation. In Unit 8, we shall prove that this is not 
possible: it forms the content of Godel’s First Incompleteness Theorem. So 
it makes sense to settle for a simple set of axioms, thus satisfying criterion 4, 
which meets criteria 1 and 2 and also enables us to derive as many theorems 
as possible, thus satisfying criterion 3. 

However, at this point we need to remember that our ultimate goal is to 
prove Godel’s Incompleteness Theorems and to answer Leibniz’s and 
Hilbert’s Questions. It turns out that we are able to make progress towards 
our goal by considering a set of axioms which certainly meets criteria 1, 2 
and 4, but is so far from meeting criterion 3 that it is very easy to find 
sentences which are true in the standard interpretation but which cannot be 
derived from the axioms. With our ultimate goal in mind, therefore, we 
consider the theory Q which can be derived from the following seven axioms. 


We combine an algorithm which 
checks whether the proof follows 
the rules and identifies the 
assumptions on which ip depends 
with the algorithm which checks 
whether these assumptions are 
sentences in S. 


We can satisfy criterion 3 by taking 
our set of axioms to be Complete 
Arithmetic, but, as we shall see in 
Unit 8, this set does not satisfy 
criterion 2. 


We shall explain why it is fruitful 
to consider such a weak set of 
axioms in Unit 7. 
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Definition 3.6 Axioms of the theory Q 


Qi 

Vx\/y (x' = y' ■ 

-* X 

= v) 

Q2 

if 

j 

0 

11 



Q3 

Vx (-1 x — 0 —> 

3yx 

= 1 n 

Q4 

Vx (x + 0) = x 



Q5 

VxVy (x -f- y') ■■ 

= (x 

+ yY 

Q6 

0 

II 

o' 

> 



Q7 

VxVj/ (x • y') = 

: ((* 

•y) + x) 


We now ask you to check that this set of axioms satisfies criterion 1. 

Problem 3.4 _ 

Write down the properties of the standard interpretation yU expressed by the 
axioms of Q, and hence satisfy yourself that each of these axioms is true in 
this interpretation. 


It follows from Theorem 3.2 and Problem 3.4 that the standard 
interpretation yU is an interpretation of the theory Q. This is, of course, as 
we intended. The theory Q is thus consistent. 

In fact the interpretations of the formal language given in Examples 3.5 
and 3.6 of Unit 4 are non-standard interpretations of Q. That is, all seven of 
the axioms of Q are true in both of these interpretations. 

Problem 3.5 __ 

The remaining axioms will be 
shown to be true in Example 3.2. 


Check the examples, problems and additional exercises of Section 3 of Unit 4 
to see which of the axioms of Q have been shown to be true in (a) the 
interpretation yU* in Example 3.5 of Unit 4 and (b) the interpretation yU** 
in Example 3.6 of Unit 4- 


Example 3.2 

We show that all the axioms of Q are true in the interpretations yU* and 
yU** of Examples 3.5 and 3.6 of Unit 4- 

It has already been noted in the solution to Problem 3.5 that Q3, Q5 and 
Q7 are true in both of these interpretations. 

We now turn our attention to the other four axioms. 

Axiom Q 1 expresses the fact that the successor function is a one-one 
function. It is evident from the tables for the successor function in 
Examples 3.5 and 3.6 of Unit 4 that this axiom is true in both 
interpretations. 

Axiom Q2 expresses that there is no element in the domain of the 
interpretation whose successor is 0. Again, using the successor tables in 
Examples 3.5 and 3.6 of Unit 4, it is easily checked that this is true in both 
interpretations. 

The truth of axiom Q4 in both interpretations can be seen from the first 
columns of the addition tables in Examples 3.5 and 3.6 of Unit 4 . Likewise 
the first columns of the multiplication tables in these examples show that 
axiom Q 6 is true in both cases. 

Thus all of the seven axioms of Q are true in these two interpretations. 
Hence any sentence which is derivable from these axioms is true in both 
interpretations. ^ 
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Now let us consider criterion 2. As the given set of axioms of Q is finite, 
there is a very simple algorithm for determining whether a given formula <j> 
is an axiom. Just compare (j> with each of the seven axioms of Q in turn. If 
<f> is identical with one of the sentences Q 1 to Q7, then it is an axiom; 
otherwise, it is not. Thus criterion 2 is satisfied. 

We trust that you will agree that the set of axioms of Q is very simple, so 
that criterion 4 is satisfied. 

Now we show that criterion 3 is far from being met. 

It follows from Example 3.2 and the Correctness Theorem that any sentence 
which is not true in the interpretation yU* cannot be derived from the 
axioms of Q. That is, such a sentence cannot be a theorem of Q. Likewise, a 
sentence which is not true in the interpretation yf** also cannot be a 
theorem of Q. Thus, from Section 3 of Unit 4, h follows that none of the 
following sentences, each of which is true in the standard interpretation yU, is 
a theorem of Q. 

VxVy(x + y) = (y + x) 

Vx -i x' = x 
Vx (0 - x) =0 
VxVy (x • y) = (y • x) 

Vx (0 + x) = x 

Problem 3.6 -— 

Show that none of the following sentences, each of which is true in the 
standard interpretation yU, is a theorem of Q. 

(a) VxVy Vz (x + (y + z)) = ((x + y) + z) 

(b) VxVy Mz (x - (y • z)) = ((x • y) • z) 

(c) VxVy Mz (x • (y + z)) = ((x • y) + (x • z)) 


It is clear from these examples that there are many sentences which are true 
under the standard interpretation yU but which cannot be derived from the 
axioms of Q. In this sense Q is a very weak theory. None the less, it will 
emerge from the next unit, where we indicate which theorems can be derived 
in Q, that it is a very useful theory. As an appetizer, we show that a 
sentence which in the standard interpretation states that ‘one plus one 
makes two’ can be derived from the axioms of Q. 

Example 3.3 

We show that 

h Q (O' + O') = 0" 


1 (1) Vx (x + 0) = x Ass 

2 (2) VxVy (x + y') = (x + y)' Ass 

2 (3) Vy (O' + y') = (O' + y)' UE,2 

2 (4) (O' + O') = (O' + 0)' UE, 3 

1 (5) (O' + 0) = 0' UE, 1 

1,2 (6) (O' + O') = 0" Sub, 5,4 


On line 6 we have obtained the formula (O' + O') = 0" by substituting the 
term 0' for the term (O' + 0) in the formula on line 4. This is a legitimate 
use of the Substitution Rule because the formula (O' + 0) = O', which 
permits such a substitution, occurs on line 5. 

The assumptions in force on the final line are both axioms of Q. Hence we 
have shown that the formula (O' + O') = 0" is a theorem of Q and so we can 
write \~q (O' + O') = 0". ♦ 


The relevant parts of Section 3 of 
Unit 4 are, respectively, 

Example 3.7(a), Problem 3.5(a) 
and (c), and Additional 
Exercise 5(a) and (c). 
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SUMMARY 


We began the unit with some practical advice about finding formal proofs. 
We drew attention to the usefulness of the technique of proof by 
contradiction. Then we gave a list of techniques for finding formal proofs 
based on considering both the logical form of any assumptions and the 
logical form of the desired conclusion. We supplemented these techniques by 
a table of some standard cases of tautological consequence. 

Next we completed the description of our formal system by describing two 
rules of proof for handling the identity symbol, the Identity Introduction 
Rule (II) and the Substitution Rule (Sub). We drew attention to the fact 
that our formal system satisfies both the Correctness Theorem and the 
Adequacy Theorem, though we did not prove these theorems. 

Finally we considered the matter of adding to our formal system some 
axioms to express properties possessed by our standard interpretation of 
number theory. After a general discussion of axiom systems and theories, we 
introduced a particular theory Q which has only seven axioms. We checked 
that all the axioms of Q are true in the standard interpretation and we used 
the non-standard interpretations introduced in Unit 4 to show that there 
are many sentences of our formal language which are true in the standard 
interpretation but which cannot be derived from the axioms of Q. None the 
less we claimed that Q is a useful theory to study. We shall make good this 
claim in Units 7 and 8. 


OBJECTIVES 

We list those topics on which we may set assessment questions to test your 

understanding of this unit. 

After working through this unit you should be able to: 

(a) understand and use the technique of proof by contradiction; 

(b) understand the meaning and use of the rules II and Sub; 

(c) construct simple formal proofs using all nine rules of proof, making use 
of the techniques set out in Subsection 1.2 and the standard cases of 
tautological consequence set out in Subsection 1.3; 

(d) understand and use the Correctness and Adequacy Theorems; 

(e) understand the meanings of the terms theory, axiom, theorem, 
consistency, completeness and interpretation of a theory; 

(f) understand the definitions of Complete Arithmetic and of the theory Q- 

(g) use non-standard interpretations of Q to show that given sentences are 
not theorems of Q. 




ADDITIONAL EXERCISES 


Most of these exercises provide further practice, should you feel you need it, 
in handling the main ideas in the unit on which you are likely to be assessed. 

There are a few harder problems, labelled as such in the margin. These are 
harder than any of the problems you are likely to encounter in the 
assessment and are included solely as challenges for the interested student. 


Section 1 


1 (a) What is wrong with the following attempt to show that, for all 

formulas <p, the formula <p can be derived from the formula 
Vd —i0? 


1 

( 1 ) 

Vd —i0 

Ass 

1 

( 2 ) 

~‘<P 

UE, 1 

3 

(3) 

3 vcp 

Ass 

4 

(4) 

<P 

Ass 

1,4 

(5) 

(<p & -1 <p) 

Taut, 2, 

1,3 

( 6 ) 

(<p & -1 <p) 

EH, 5 

1 

(7) 

(3d <p —1 (<pk. -i <p)) 

CP, 6 

1 

( 8 ) 

-i3 v<p 

Taut, 7 


(b) Give a correct schematic proof to show that, for all formulas (p, 
Vd —i<j) I — '3v <p 


Warning! This is not a correct 
proof! 


Harder problem 


2 Show how the proofs in Examples 1.1 and 1.3 can be used to help show Harder problem 
that, for all formulas <p, 

b (3 d —i0 <-+ -iVd <p ) 


3 Give formal proofs to show the following. 

(a) Vx (x + 0) = x b 3x (0 + x) = x 

(b) 3x x = x' I - 3yy = y' 

(c) Vx (x + x) = (x • x)' b Vy 3 z (y + y) = z' 

(d) b (3x Vy (x + y') = y —> Vz 3x (x + z") = z') 

4 Show each of the following, for all formulas (p, 'tp and 9. 

(a) 3v (<p <->• ^ v -l <^ ^ -i ip 

(b) Vu (4> V ip) b (3u {cp —y 9) —► 3v (9 V xp)) 

(c) Vu (0 —»■ 0), 3v (0 &; 0) I—'Vu (-i 9 <-> -0) 

5 Show that, for all formulas 7 , 6, cj> and ip, 

(S <-+ 3 y (x&ip)), Vy(x 7 ) b {6 <-> 3y (7 &*!>)) 

6 Show that, for all formulas 0, ip and 9 , 

-i</>, 3u (ip —> (p) b (Vu (0 V ip) —> -<iv(9 —* <p)) 

provided that the variable v does not occur freely in <p. Indicate the 
steps of your proof which require that v does not occur freely in (p. 

7 Show that, for all formulas 0, 

\/v <p I—i3u -1 <p 


Harder problem 

This result is used in Unit 7. 


Harder problem 
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Section 2 


1 The following is a correct schematic proof from which the assumption 
numbers have been omitted. Fill in the missing assumption numbers. 


(1) 

VxVyx = y 

Ass 

(2) 

\/yx = y 

UE, 1 

(3) 

X = X 

II 

(4) 

x = y 

UE, 2 

(5) 

y — x 

Sub, 3,4 

(6) 

X = X 

UE, 2 


2 Give formal proofs to show the following. 

(a) b VxVy (x = y-*(x*x) = (y y)) 

(b) b VxVyVz (x = y — ► (z • x) = (z • y)) 

3 Give examples of formulas <j> and ip such that ip is a logical consequence 
of (p but not a tautological consequence of <p. 

4 Show that the following statements are not true. 

(a) h Vx (-i x = 0 —> 3y x = y') 

Hint: Use one of the facts established in the examples and 
problems in Section 3 of Unit 4- 

(b) b Vx Vy (x 7 = y' —► x = y) 

5 Show that it is not the case that, for all formulas </>, 

b (3 vcp —* \/v<p) 


Section 3 

1 Let T be a complete and consistent theory. Show that if $ and \b are 
sentences such that \~t (4> V <b), then either b T $ or b r 'b. 

2 (a) Suppose that 4>i, 4> 2 , • ■ •, $k are sentences and that \b is a sentence 

such that $ 1 , $ 2 ) b $. Show that 

b ($1 -+ ($2 (-►($*-►*)■■ •))) 

(b) Theorem 3.1 states that, for any theory T and all sentences T, if >b 
is derivable from T then $eT. Prove this theorem directly wit hin 
the formal system without appeal to the Correctness and Adequacy 
Theorems. Hint: As 'b is derivable from T then there are sentences 
$i> 3 * 2 )■ ■ ■ ,$k in T such that <f>i,$ 2 ,• • •,b If T has axioms 
in the set S, there are derivations of each of iq, d> 2) • • •, with 
assumptions in the set S. Combine all these derivations together in 
a suitable way. 

3 Show that the interpretation of the formal language given in 
Example 3.4 of Section 3 of Unit 4 is not an interpretation of the 
theory Q. Deduce that the axiom Q3 is not a logical consequence of the 
other axioms of Q. 

4 Show that none of the following sentences is a theorem of Q. 

(a) 3y\/x (y + x') = x" 

(b) MxMy (x" + y) = (y 1 + x') 

(c) 3y Vx (y • x) = y 




Solutions to the Problems 


SOLUTIONS TO THE PROBLEMS 


Solution 1.1 


1 

(1) 

3 v<p 

Ass 

2 

(2) 

<t> 

Ass 

3 

(3) 

Vw -xp 

Ass 

3 

(4) 

~xp 

UE, 3 

2,3 

(5) 

(<P & -xp) 

Taut, 2,4 

2 

(6) 

(Vu -xp —> (<p & -xp)) 

CP, 5 

2 

(7) 

—iWv -xp 

Taut, 6 

1 

(8) 

—<Wv —xp 

EH, 7 


The first two lines are standard when one of the assumptions is an 
existential formula. We then assume Vv —xp hoping to derive a 
contradiction. We use the UE Rule to drop the universal quantifier from 
this formula, derive a contradiction and then use the proof by 
contradiction method. The use of the EH Rule on line 8 is legitimate as 
the variable v cannot occur freely in the formula -iVt; -xp. 


1 

(1) 

Vv<p 

Ass 

2 

(2) 

3v -<ip 

Ass 

3 

(3) 

-iip 

Ass 

1 

(4) 

(p 

UE, 1 

5 

(5) 

Vu (< p —► ip) 

Ass 

5 

(6) 

(<P -*• tp) 

UE, 5 

1,5 

(7) 

tp 

Taut, 4,6 

1,3,5 

(8) 

(ip & -up) 

Taut, 3,7 

1,3 

(9) 

(\/v (<p —* ip) - 

-^(ipk.^ip)) CP, 8 

1,3 

(10) 

->Vv (cp —► ip) 

Taut, 9 

1,2 

(11) 

-iVv (c p —> ip) 

EH, 10 

The first four lines 

are standard. 

We introduce the given assumptions on 


lines 1 and 2. As one of the assumptions is an existential formula, we 
also assume the formula on line 3. As another is a universal formula, we 


use the UE Rule to drop the universal quantifier. We then assume the 
formula Vv (<p —* ip), use the UE Rule to drop the universal quantifier 
from this extra assumption and try to derive a contradiction. After 
deriving a contradiction, we use the proof by contradiction method. The 
use of the EH Rule on line 11 is legitimate as the variable v cannot 
occur freely in either the formula ->Vv (<p — ► ip) being derived or the 
other assumption Vw <p on line 10. 


This sort of commentary on the 
proof would not normally be 
required in the answer to an 
assessment question. A correct 
formal proof would normally suffice 
on its own! 


Solution 1.2 


1 

(1) 

Vv (-Kp —> Ip) 

Ass 

2 

(2) 

^- 

m 

r 

Ass 

1 

(3) 

h<P -*• tp) 

UE, 1 

4 

(4) 

-xp 

Ass 

1,4 

(5) 

tp 

Taut, 3, 

1,4 

(6) 

3 vip 

El, 5 

1,2,4 

(7) 

(3v ip & -i3u ip) 

Taut, 2. 

1,2 

(8) 

(-Kp — » (3u ip & -i3u ip)) 

CP, 7 

1,2 

(9) 

<P 

Taut, 8 

1,2 

(10) 

'ivcp 

UI, 9 


The first three lines of the above schematic proof are standard. First we 
introduce the two given assumptions and then use the UE Rule to 
remove the universal quantifier from the first assumption. Then we turn 
our attention to the formula \/v (p that we are ultimately aiming to 
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Solutions to the Problems 


derive. Our strategy is first to derive 0 and then use the UI Rule. Since 
there is no other obvious way to make progress towards our aim of 
deriving 0, we introduce ->0 as an assumption with a view to deriving a 
contradiction. Keeping in mind that we have the formula -<3vip on 
line 2, we know that, to derive a contradiction, it would be enough to 
derive 3v ip. We then use the proof by contradiction method. 


1 

(1) 

0 

Ass 

2 

(2) 

3v {ip —> -i0) 

Ass 

3 

(3) 

{ip ->■ -.0) 

Ass 

4 

(4) 

Vvip 

Ass 

4 

(5) 

ip 

UE, 4 

3,4 

(6) 

-.0 

Taut, 3,5 

1,3,4 

(7) 

(0 & -10) 

Taut, 1,6 

1,2,4 

(8) 

(0 & -10) 

EH, 7 

1,2 

(9) 

(Vu0 —► (0 & -10)) 

CP, 8 

1,2 

(10) 

->Vv ip 

Taut, 9 

As -iVu ip is a negation, our strategy is to add the assumption Vu ip to 


the assumptions 0, 3v (ip —> -i0) and try to derive a contradiction. As 
the assumption 3v {ip —> ->0) is an existential formula, preparatory to a 
use of the EH Rule we also assume the formula {ip —> -.0). We use the 
UE Rule on line 5 to drop the universal quantifier from one of the 
assumptions and then derive a contradiction on line 7. Because of the 
condition that the variable v does not occur freely in 0, we have taken 
care to derive the contradiction (0&->0), rather than say {ip & -up), so 
that we can then use the EH Rule on line 8 and finish off the proof by 
contradiction. 


Solution 1.3 


Here we adopt the standard strategy for proving disjunctions. To derive 
(3u <p V Vu -i0) we use the fact that this formula is a tautological consequence 
of the implication (-> 3vcp —► Vi> -i0). We can derive this implication by first 
deriving Mv -«f> from the assumption -Bv 0 and then using the CP Rule. The 
derivation of Vv -i0 from -i3u 0 is very similar to our derivation of Vv 0 from 
-i3u-i0 in Example 1.3. We thus arrive at the following schematic proof. 


1 

(1) 

-i3u 0 

Ass 

2 

(2) 

0 

Ass 

2 

(3) 

3w 0 

El, 2 

1,2 

(4) 

(3u 0 & ->3u 0) 

Taut, 1,3 

1 

(5) 

(0 —> (3u 0 & ->3u 0)) 

CP, 4 

1 

(6) 

-.0 

Taut, 5 

1 

(7) 

Vu-i 0 

UI, 6 


(8) 

(-i3w 0 —+ Vu -i0) 

CP, 7 


(9) 

(3u 0 V Vu -i0) 

Taut, 8 


Solution 1.4 

We follow the standard strategy for proving bi-implications. 


1 

(1) 

-,(0&0) 



Ass 

1 

(2) 

(-10 V -10) 



Taut, 1 


(3) 

(-i (0&0) -> 

( '0 V 

-10)) 

CP, 2 

4 

(4) 

(-10 V -10) 



Ass 

4 

(5) 

-i(0&0) 



Taut, 4 


(6) 

((-■0 V -10) -> “i(0&! 0)X_ 

CP, 5 


(7) 

( '(0 & 0) 

(-10 V 

-10)) 

Taut, 3,6 


You can use truth tables to check 
that the use of the Tautology Rule 
on lines 2 and 5 is correct. 
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Solutions to the Problems 


Solution 1.5 


1 

(1) 

3v (<p —> ip) 

Ass 

2 

(2) 

Vv<p 

Ass 

3 

(3) 

(<P -► ip) 

Ass 

2 

(4) 

4> 

UE, 2 

2,3 

(5) 

ip 

Taut, 3,4 

2,3 

(6) 

3vip 

El, 5 

1,2 

(7) 

3vip 

EH, 6 


This proof starts with a straightforward use of techniques (Tl), (T2) 
and (T3) to give lines 1 to 4. As we want to derive 3vip, we follow (T10) 
and first try to derive ip, which we can by using the Tautology Rule. 


Solution 1.6 


1 

(1) 

Vv(p 

Ass 

2 

(2) 

(ip —► -m p) 

Ass 

1 

(3) 

<P 

UE, 1 

4 

(4) 

(ip -*■ -"/>) 

Ass 

5 

(5) 

Vvip 

Ass 

5 

(6) 

iP 

UE, 5 

1,4 

(7) 

—tip 

Taut, 3,4 

1,4,5 

(8) 

(ip & ->ip) 

Taut, 6,7 

1,4 

(9) 

(\/vip —► (ip & ~'1p)) 

CP, 8 

1,4 

(10) 

-i\/vip 

Taut, 9 

1,2 

(11) 

-i\/vip 

EH, 10 


One alternative proof would have 
lines 1 to 6 as here, but on line 7 
would apply the Tautology Rule to 
lines 4 and 6 to obtain -nj>, 
depending on assumptions 4 and 5. 
The contradiction on line 8 would 
then be (<p & ~'<p) and on line 9 we 
would then have 
(' ivip — » (4> & -,</>)). 


We obtained this schematic proof by following standard strategies. 

Following (Tl), the assumptions we are given are introduced on the first two 
lines. Following (T2) and (T3), the UE Rule is applied to the first 
assumption, and we introduce (ip —> -><p) as a new assumption on line 4 with 
a view to a later use of the EH Rule. Now we turn our attention to the 
desired conclusion, ->Vu ip. Since this begins with a negation symbol, we 
follow (T4) by introducing the assumption Vv ip and aiming to derive a 
contradiction. The UE Rule applied to Vv ip gives us the formula ip. Thus to 
get a contradiction all we now need do is derive -'ip. It is not difficult to see 
that this is a tautological consequence of the formulas <p and (ip —* -«p). We 
are thus able to complete the proof in the intended way. 


Solution 1.7 


1 

(1) 

Vu (cp —> 6) 

Ass 

2 

(2) 

3v (ip V ->(p) 

Ass 

1 

(3) 

(*-*) 

UE, 1 

4 

(4) 

(ip V ~'<p) 

Ass 

5 

(5) 

h/v(p 

Ass 

5 

(6) 

4> 

UE, 5 

7 

(7) 

Vu ->(ip & 0) 

Ass 

7 

(8) 

—'(ip & 0) 

UE, 7 

4,5 

(9) 

Ip 

Taut, 4,6 

1,5 

(10) 

9 

Taut, 3,6 

1,4,5 

(11) 

(ipk. 9) 

Taut, 9,10 

1,4,5,7 

(12) 

((V>&0) &-#&*)) 

Taut, 8,11 

1,4,5 

(13) 

(Vu -'(ip & 9) —i ((ip & 9) & -'(ip & 0))) 

CP, 12 

1,4,5 

(14) 

-A/v -<(ip & 9) 

Taut, 13 

1,2,5 

(15) 

-<Vv-i(ip & 9) 

EH, 14 

1,2 

(16) 

(\/v <p —> -iVu -<(ip & 9)) 

CP, 15 
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Solutions to the Problems 


This is quite a long schematic proof, but it can be seen that we have 
obtained it by following standard strategies. Following (Tl), the two given 
assumption formulas are introduced and handled in the standard way on the 
first four lines, following (T2) and (T3). Then we turn our attention to the 
desired conclusion. Since this is the implication (Vw cp —> -A/v -\(ip k 0)), we 
follow (T7) and introduce the antecedent, Vu (p , as an additional assumption 
on line 5 and aim to derive the consequent ->Vv ->(ipk 9). Since this is a 
negation, we follow (T4) by introducing Vv~<(ip k 9) as a new assumption 
with the aim of deriving a contradiction. We achieve a contradiction on 
line 12 and then complete the proof in accordance with the strategies that 
we have already mentioned. 


Solution 1.8 

We need to show that, whenever all the formulas (p, (— .0 V ijj) and 9 are 
true, then the formula ->(ip —> 9) is also true. So we need only consider the 
lines of the truth table where <p and -<0 are both true, that is where <p is true 
and 9 is false. So we need only consider two lines of the full truth table. 

k (-> <p V ip)) k -> 9) (ip-> 9)) 

110111 11011100 
10 0100 01010010 

®®@®@® ©®®©@®©® 

We see from column © that the formula is a tautology. It follows that 
~'(ip —> 9) is a tautological consequence of the formulas <p, (-><p V ip) and ->9. 


Solution 2.1 

( a ) 1 (1) x = y Ass 

(2) (z + x) - (z + x) II 

1 (3) (z + x) = (z + y) Sub, 1,2 

(4) (x = y-> (z + x) = (z + y)) CP, 3 

(5) Vz(x = y-> (z + x) = (z + y)) UI,4 

( 6 ) My\/z(x = y -+ (z + x) = (z + y)) UI,5 


(7) VxVyVz(x = y (z + x) = (z + y)) UI ,6 

The formula on line 3 has been obtained from that on line 2 by 
substituting y for the second occurrence of x. Since we have the formula 
x = y on line 1 , this is a legitimate use of the Substitution Rule. 


1 

(1) 

x = y 

Ass 

2 

( 2 ) 

y — z 

Ass 

1,2 

(3) 

X = z 

Sub, 1, 2 

1 

(4) 

(y = z->x = z) 

CP, 3 


(5) 

(x = y-+(y = z-*x = z)) 

CP, 4 


(6) 

Vz (x = y -*• (y = z -+ x = z)) 

UI, 5 


(7) 

VyVz (x = y -* (y = z -> x = z)) 

UI, 6 


(8) 

VxMy\/z (x = y -»• (y = z —> x = z)) 

UI, 7 


The formula on line 3 has been obtained from the formula on line 1 by 
substituting z for y. This substitution is a legitimate use of the 
Substitution Rule because we have the formula y = z on line 2. 

Solution 2.2 


(a) 

1 

(1) 

y = X 

Ass 




(2) 

y 1 = y’ 

II 



1 

(3) 

x’ - y' 

Sub, 1,2 


(b) 

1 

(1) 

x = y 


Ass 



(2) 

((x • x) 

• x) = ((x • x) - x) 

II 


1 

(3) 

((y ■ x) 

H 

II 

Sub, 1 ,2 


Note that it is not a legitimate use 
of the Substitution Rule to 
substitute x for y in the formula on 
line 2, as the formula x = y on 
line 1 does not permit substitution 
of x for y. It only permits 
substitution of y for x. 
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Solutions to the Problems 


Solution 2.3 

We need to find an example of a formula <j>, and an interpretation, for which 
the formula (Vx 3y 0 —> 3y\/x4>) is not true. It will then follow from the 
Correctness Theorem that it is not the case that h (Vx 3y (f> —> 3yVx <f>). 

There are lots of possible choices for the formula <j>. We take <j> to be the 
formula y = x'. In the standard interpretation, the formula Vx 3y y = x' is 
interpreted as ‘for every natural number x, there is a natural number y 
which is the successor of x’ and this is true. On the other hand the formula 
3y Vx y = x' is interpreted as ‘there is a natural number y which is the 
successor of every natural number x’, which is false. So with this choice of cj), 
the formula (Vx 3y<p—> 3yVx0) is false in the standard interpretation. 

Solution 3.1 

Plainly every sentence 'k in S is derivable from S using the one-line proof 
1 (1) 'k Ass 

So each such is in Th(S). 

Solution 3.2 

Suppose that T is a theory which is not consistent. Then there is some 
sentence $ of the formal language such that both \~t 4? and Pt -, 4>. Now let 
vp be any sentence of the formal language. The formula ((4> & ->$) —* th) is a 
tautology. Hence T can be derived from the formulas $ and ->$ using the 
Tautology Rule. Therefore, as T is a theory and so is closed under 
derivation (Theorem 3.1), it follows that Pt 'S’. 

Solution 3.3 

Suppose that T is a theory which is both complete and consistent. Let $ be 
any sentence of the formal language. Since T is complete, either Pt ‘P or 
P r -i$. Since T is consistent, we cannot have both P t 4> and Pt Hence 
precisely one of \~t 4> and Pt ^4* holds. 

Solution 3.4 

We consider each of the seven axioms of Q in turn and state what they 
express in the standard interpretation JV. It should be evident in each case 
that the axiom expresses a true statement about yP! 

Ql expresses that the function succ, the successor function, is one-one. 

Q2 expresses the fact that 0 is not the successor of any natural number. 

Q3 expresses the fact that every non-zero natural number is the successor of 
some natural number. 

Q 4 expresses the fact that, for every natural number n, 
n + 0 — n. 

Q5 expresses the fact that, for all natural numbers n and m, 
n + succ(m) = succ(n + m). 

Q6 expresses the fact that, for every natural number n, 
n x 0 = 0. 

Q7 expresses the fact that, for all natural numbers n and m, 
n x succ(m) = (n x m) + n. 


Equivalently, if 4* € S, then every 
interpretation which makes S true 
also makes $ true, so $ is a logical 
consequence of S and hence 
V € Th(S). 


Recall that a function / : A —> B 
is one-one if, for all ai, 02 £ A, 

f(a 1 ) = f{a 2 ) =► ai = a 2 . 


Note that the equations 
corresponding to axioms Q4 and 
Q 5 give the definition of addition 
by primitive recursion, as given in 
Unit 2. 


Note that the equations 
corresponding to axioms Q6 and 
Q7 give the definition of 
multiplication by primitive 
recursion, as given in Unit 2. 
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Solution 3.5 

In Example 3.7(b) of Unit 4 it is shown that axiom Q3 is true both in yU* 
and yU**. It follows from Solution 3.5(b) of Unit 4 that axiom Qb is true in 
both these interpretations, and from the solution to part (b) of Additional 
Exercise 5 for Section 3 of Unit 4 that Axiom Q7 is true in both these 
interpretations. 

Solution 3.6 

We show that in each case the sentence is not true in the interpretation yU** 
of Example 3.6 of Unit 4. As all the axioms of Q are true in this 
interpretation, it will follow from the Correctness Theorem that the sentence 
is not a theorem of Q. 

Since each sentence expresses a universal property, we can show it is false by 
giving a single counter-example in each case. As the following calculations 
show, we can obtain a counter-example for each sentence by interpreting x, 
y and z as the element a of the interpretation yU**. 

(a) a + (a + a) = a + /3 = a, whereas (a + a) + a = (3 + a = (3. 

Hence a + (a + a) ^ (a + a) + a. So the sentence 
VxMyMz (x + (y + z)) = ((x + y) + z) is not true in yV**. 

(b) a ■ (a ■ a) = a ■ (3 = (3, whereas (a ■ a) ■ a = 0 ■ a — a. 

Hence a ■ (a ■ a) ^ (a ■ a) ■ a. So the sentence 
VzVj/Vz^ • ( y ■ z)) = ((# • y) • z) is not true in yU** . 

(c) a ■ (a + a) = a ■ (3 = (3, whereas (a ■ a) + (a • a) = (3 + (3 = a. 

Hence a ■ (a + a) 7 ^ (a ■ a) + (a • a). So the sentence 
VxVyVz {x-(y + z)) = ((x • y) + (x • z)) is not true in yT* . 


SOLUTIONS TO ADDITIONAL 
EXERCISES 


There are other interpretations of 
x, y and z which will give 
counter-examples, for instance 
interpreting them all by (3. 


Section 1 

1 (a) The use of the EH Rule on line 6 is not correct as, in general, the 

variable v may occur freely in the formula ((/> & -yp) on line 5. 

(b) We can overcome this difficulty by using the contradiction on line 5 
to derive a contradiction in which the variable v does not occur 


freely. We 

thus 

arrive at the following correct 

proof. 

1 

(1) 

Vv -,0 

Ass 

1 

(2) 

“"A 

UE, 1 

3 

(3) 

3v(p 

Ass 

4 

(4) 


Ass 

1,4 

(5) 

(4> & - , <A) 

Taut, 2,4 

4 

(6) 

(Vv -i (p —► {<j> & -i (j> )) 

CP, 5 

4 

(7) 

-iVu -i <p 

Taut, 6 

1,4 

(8) 

(Vu -i<j) & -iVu ->0) 

Taut, 1, 7 

1,3 

(9) 

(Vu —>(j> & -tiv ->d») 

EH, 8 

1 

(10) 

(3w <j> —> (Vu -«f) & -iVw —>0)) 

CP, 9 

1 

(11) 

-e- 

m 

r 

Taut, 10 
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2 Technique (T 8 ) tells us that to derive the bi-implication 

(3v -i(f) *-> -iVu 0 ) we should aim first to derive the two implications 
(3u -i<j> — > -iVu 0) and (-A/u 0 —» 3v -i0). The first of these implications 
can be obtained from the formal proof of Example 1.1 by one use of the 
CP Rule. The second implication can be derived by noting first that it 
is a tautological consequence of (-Gw ->0 —> Vu 0) and then that this can 
be derived from the formal proof of Example 1.3 by one use of the CP 
Rule. We thus obtain the following formal proof. 


1 

( 1 ) 

-e- 

r 

m 

Ass 

2 

( 2 ) 

-:(() 

Ass 

3 

(3) 

Vu0 

Ass 

3 

(4) 

<t> 

UE, 3 

2,3 

(5) 

(0 & ->0) 

Taut, 2,4 

2 

( 6 ) 

(Vl> 0 —> (0 & -10)) 

CP, 5 

2 

(7) 

-i Vu0 

Taut, 6 

1 

(8) 

-i Vw0 

EH, 7 


(9) 

(3w -i0 —> -iVv 0) 

CP, 8 

10 

( 10 ) 

-i3u -i0 

Ass 

11 

( 11 ) 

—'0 

Ass 

11 

( 12 ) 

3n -i0 

El, 11 

10,11 

(13) 

(3n -i0 & -i3u -i0) 

Taut, 10,12 

10 

(14) 

(-10 —> (3v -i0 & -i3t> -i0)) 

CP, 13 

10 

(15) 

0 

Taut, 14 

10 

(16) 

Vu0 

UI, 15 


(17) 

(-i3n -i0 —> Vu 0) 

CP, 16 


(18) 

(-iVu 0 —> 3u -i0) 

Taut, 17 


(19) 

(3t> -i0 -iVu 0) 

Taut, 9,18 


3 (a) Technique (T10) suggests that we should look for a term r such 

that we can derive the formula 0 (r/ x ) where (j> is the formula 
(0 + a:) = x. We note that 0(O/x) is the formula (0 + 0) = 0, 
which can easily be derived from the formula Vx (x + 0) = x. So we 
obtain the following formal proof. 


1 

(1) 

Vx (x + 0) 

= X 

Ass 

1 

( 2 ) 

(0 + 0) = 

0 

UE, 

1 

(3) 

3x (0 + x) 

= X 

ei,: 

1 

(1) 

3x x = x' 

Ass 


2 

( 2 ) 

x — x' 

Ass 


2 

(3) 

II 

s* 

m 

El, 2 


1 

(4) 

LU 

II 

eh,: 



The proof starts with the standard preparation for a use of the EH 
Rule and we then follow (T10). 

(c) 1 (1) Vx (x + x) = (x • x)' Ass 

l (2) (y + y) = (y • y)' UE, l 

1 (3) 3z (y + y) = z' El, 2 

1 (4) Vy 3z (y + y) = UI, 3 

(T9) suggests that we try to derive the formula 3z (y + y) = z'. To 
derive this, (T10) suggests we first derive (y + y) = r' for some 
term r. This in turn is what leads us to eliminate the Vx in the 
assumption on line 1 by replacing the xs by ys. 
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1 

(1) 

3xWy(x + y') = y 

Ass 

2 

(2) 

Vy (x + y') = y 

Ass 

2 

(3) 

II 

*v» 

+ 

UE, 2 

2 

(4) 

(x + z") = z' 

El, 3 

2 

(5) 

Vz 3x (x + z") — z' 

UI, 4 

1 

(6) 

Vz 3x (x + z") = z' 

EH, 5 


(7) 

(3 xVy(x+y') = y- 

-> Vz 3x (x + z") = z') CP, 6 


Following (T7), we assume the formula 3x'iy (x + y') = y, derive 
Vz 3x (x + z") = z' and use the CP Rule. Lines 1 and 2 are then 
the standard preparation for a use of the EH Rule. We can 
anticipate following (T10) and then (T9) once we have derived the 
formula (x + z") — z', which we can do on line 3 with a 
straightforward use of the UE Rule. 


Note that there is a correct 
alternative proof based on using 
the EH Rule straight after line 4 to 
obtain 3x (x -f- z") = z' on line 5 
depending on assumption 1. Line 6 
would then follow using the UI 
Rule. 


4 


1 

(1) 

3u ( <p +-> ip) 

Ass 

2 

(2) 

(<p ip) 

Ass 

3 

(3) 

Vu —<(p 

Ass 

3 

(4) 


UE, 3 

2,3 

(5) 

-vtp 

Taut, 2,4 

2,3 

(6) 

3u -i ip 

El, 5 

1,3 

(7) 

3u -yip 

EH, 6 


As usual, we begin by introducing the given assumptions and, as 
one of them is an existential formula, we follow technique (T3). 
Following (T10), we aim to derive -> ip. A simple use of the UE 
Rule, following (T2), and use of the Tautology Rule does indeed 
give the formula -yip. The desired conclusion follows by routine 


(b) 


applications of 

the El and EH Rules. 


1 

(1) 

Vu (< p V ip) 

Ass 

2 

(2) 

3u (<p — > 0) 

Ass 

3 

(3) 

{cP^O) 

Ass 

1 

(4) 

(<pVip) 

UE, 1 

1,3 

(5) 

(0 V ip) 

Taut, 3,4 

1,3 

(6) 

3u (6 V ip) 

El, 5 

1,2 

(7) 

3v ( 9 V ip) 

EH, 6 

1 

(8) 

(3u (cp —> 6 ) — > 3v (6 V ip)) 

CP, 7 

We follow (T7) 

and introduce the extra assumption 3v 


-► 6). We 

then follow (T2) and (T3) for dealing with assumptions which are, 
respectively, universal and existential formulas. With (T10) in 
mind, we seek to derive ( 6 V ip), which follows from the Tautology 
Rule. 
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(c) 


1 

( 1 ) 

Vw (4> —> 9) 

Ass 

2 

( 2 ) 

3v (p & VO 

Ass 

3 

(3) 

(V>& VO 

Ass 

1 

(4) 

(4>-0) 

UE, 1 

5 

(5) 

Vu (-1 9 <-> VO 

Ass 

5 

( 6 ) 

(-i 9 <-> ip) 

UE, 5 

1,3 

(7) 

9 

Taut, 3,4 

3,5 

( 8 ) 

-<9 

Taut, 3 ,6 

1,3,5 

(9) 

(9 & ->0) 

Taut, 7 ,8 

1,3 

( 10 ) 

(Vu (-># <-> ip) —► (9 & -1 9)) 

CP, 9 

1,3 

( 11 ) 

-A/v (- 1 # <-> ip) 

Taut, 10 

1,2 

( 12 ) 

-Nv (->9 <-> ip) 

EH, 11 


The first four lines follow (Tl), (T2) and (T3). As the desired 
conclusion starts with a negation, we follow (T4) in line 5 to set up 
a proof by contradiction, and then (T2). Use of the Tautology Rule 
then gives a contradiction, and the remainder of the derivation 
follows the method of proof by contradiction, with a final use of the 
EH Rule. 


1 

( 1 ) 

(<5 3y (x & ip) 

Ass 

2 

( 2 ) 

Vy (x 7 ) 


Ass 

2 

(3) 

(x7) 


UE, 2 

4 

(4) 

3y (x & ip) 


Ass 

5 

(5) 

(x& VO 


Ass 

2,5 

( 6 ) 

(7& V’) 


Taut, 3,5 

2,5 

(7) 

3y (7 & ip) 


El, 6 

2,4 

( 8 ) 

3y (7 &V’) 


EH, 7 

2 

(9) 

(3y (x & ip) 

3 y (7 & VO) 

CP, 8 

1,2 

( 10 ) 

(6 -► 3y (7 k ip)) 

Taut, 1,9 

11 

( 11 ) 

3y (7 & ip) 


Ass 

12 

( 12 ) 

(7 &</>) 


Ass 

2,12 

(13) 

(x&i/O 


Taut, 3,12 

2,12 

(14) 

3y (x & 'ip) 


El, 13 

2,11 

(15) 

3y (x & 1 P) 


EH, 14 

2 

(16) 

(3y (7 & ip) 

-*■ 3 y (x & V>)) 

CP, 15 

1,2 

(17) 

(3y ('r&ip) 

-<5) 

Taut, 1,16 

1,2 

(18) 

(6 3y (7 & ip)) 

Taut, 10,17 


The first three lines follow (Tl) and (T2). Technique (T 8 ) then 
suggests that we try to derive (6 —> 3y (S & ip)) and (3y (7 & ip) ~ > <$) 
separately. To derive the former we follow (T7), though in light of the 
bi-implication on line 1 we introduce 3y (x & VO as an assumption 
rather than <5. We then follow (T3), (Til) and (T10), before using the 
EH Rule and CP Rule to obtain lines 8 and 9, as suggested by our 
earlier use of (T3) and (T7). We then obtained the desired implication 
6 —> 3y (<5 & ip) by use of the Tautology Rule again. We obtain the 
implication 3y (7 & ip) —> S in a similar fashion. Then we use the 
Tautology Rule, as suggested by our earlier use of (T 8 ), to obtain the 
desired result. 
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6 


1 

(1) 

<P 

Ass 

2 

(2) 

3w {ip —* cp) 

Ass 

3 

(3) 

(ip <P) 

Ass 

4 

(4) 

Vw {9 V ip) 

Ass 

4 

(5) 

{9 V ip) 

UE, 4 

6 

(6) 

Vw {9 -> <p) 

Ass 

6 

(7) 

(*->*) 

UE, 6 

3,4,6 

(8) 

<P 

Taut, 3,5,7 

3,4,6 

(9) 

{<p & -><p) 

Taut, 1,8 

1,3,4 

(10) 

(Vw {9 — > <p) — + {(p & ~«p)) 

CP, 9 

1,3,4 

(11) 

->Vw ( 6 —>■ (p) 

Taut, 10 

1,2,4 

(12) 

-Nv {9 —> (p) 

EH, 11 

1,2 

(13) 

(Vw (9 V ip) — i ► ->Vv (9 — > <p)) 

CP, 12 


As usual, following technique (Tl), we begin by introducing the given 
assumptions on lines 1 and 2. Following (T3), we also introduce the 
assumption ( ip —> <p) on line 3 with a view to a future use of the EH 
Rule. Next we turn our attention to the desired conclusion. Following 
(T7), we introduce the assumption Vw (6 V ip) on line 4. Since we are 
now aiming to derive ->Vu {0 —> (f>), (T4) suggests that we introduce the 
assumption Vw {9 — > <p) and then seek to derive a contradiction. Since 
we have the formula —up on line 1, we shall achieve a contradiction if we 
can derive <p, so we put our trust in (Til) and look for a use of the 
Tautology Rule. Since the formula 

(((W 

is a tautology, we can derive the formula <p by the Tautology Rule. We 
are then able to follow our intended strategy in five more lines. 

We have used the given assumption that the variable w does not occur 
freely in <p on line 12, since without this assumption the use of the EH 
Rule would not be correct. 


1 

(1) 

Vw <p 


Ass 

1 

(2) 

cp 


UE, 1 

3 

(3) 

3v —<(p 


Ass 

4 

(4) 

-'(p 


Ass 

1,4 

(5) 

{cp & ~'<P) 


Taut, 2,4 

1,4 

(6) 

(Vw (p & - 

>Vw cp) 

Taut, 5 

1,3 

(7) 

(Vw (p & - 

>Vw <p) 

EH, 6 

1 

(8) 

(3w -«p -h 

► (Vw^)& ->Vw cp)) 

CP, 7 

1 

(9) 

-Gw -i <p 


Taut, 8 


The first few lines in this schematic proof are standard. We begin by 
introducing the given assumption formula, and then apply the UE Rule 
to it. We aim to derive -Gw —i<p, so we introduce 3v -> <p as an 
assumption and hope to derive a contradiction. Since this assumption 
begins with an existential quantifier, we also introduce -><p as an 
assumption with a view to a future use of the EH Rule. It is then very 
straightforward to obtain the contradiction {<p & -> (p) on line 5. But now 
things become more tricky. This contradiction depends on the 
assumptions 1 and 4, but we are aiming to derive a contradiction 
depending on assumptions 1 and 3. In general, the formula {<p & -w p) 
may contain free occurrences of the variable w, so a use of the EH Rule 
applied to line 5 would not be legitimate. So we use the contradiction 
on line 5 to enable us to derive another contradiction on line 6, namely 
(Vw cp & ->Vv <p), in which we can be sure that there are no free 
occurrences of w. We can then safely apply the EH Rule to line 6 and in 
this way we are able to complete our proof by contradiction. 
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Section 2 


1 

( 1 ) 

Va :\/y x = y 

Ass 


1 

( 2 ) 

My a 

• = y 

UE, 1 



(3) 

X = 

X 

II 


1 

(4) 

X = 

y 

UE, 2 


1 

(5) 

y = 

X 

Sub, 3,4 


1 

(6) 

X = 

X 

UE, 2 



1 

( 1 ) 

X = y 


Ass 



( 2 ) 

(x • x) = 

: (X • X) 

II 


1 

(3) 

(x • x) = 

: (y • y) 

Sub, 1,2 



(4) 

(x = y->(x-x) = (y- y)) 

CP, 3 



(5) 

Vy(x = 

y -»• {x • x) = {y • y)) 

UI, 4 



(6) 

VxVy (a: 

= y-*(x-x) = (yy)) 

UI, 5 


1 

( 1 ) 

x = y 


Ass 



( 2 ) 

(z-x) = 

(z-x) 

II 


1 

(3) 

(z- x) = 

■{z-y) 

Sub, 1,2 



(4) 

a 

II 

'h' 

N! 

T 

II 

3 

CP, 3 



(5) 

Mz (x = 

y-^(z-x) = (z- y)) 

UI, 4 



(6) 

VyVz (x 

= y -* (z • x) = (z • y)) 

UI, 5 


(7) Vx\/y\/z (x = y —► (z • x) = (z • y)) UI, 6 


3 It is sufficient to give examples of formulas cp and ip such that cp \~ tp but 
the formula (cp —► ip) is not a tautology. It then follows from the 
Correctness Theorem that xp is a logical consequence of <p, but, as 
(< p —*■ ip) is not a tautology, it is not a tautological consequence of (p. 
Example 1.1 provides one such example (there are of course many 
others): for any formula <p , 3v-«p I— M/vcp, but the formula 
(3u -i cp —* -iVw (p) is not a tautology. 


4 


5 


By the Correctness Theorem, it will be enough to show that there is 
some interpretation of the formal language in which the sentence is 
false. 

(a) In Example 3.7 of Unit \ we saw that this sentence is not true in 
the interpretation given in Example 3.3. As we pointed out there, 

the non-zero matrix ^ ^ is not the successor of any other 

matrix in this interpretation. 

(b) Take the interpretation with domain the set of integers Z, with + 
and • interpreted by the usual addition and multiplication on Z, 
and ' interpreted by the function /: Z —> Z given by f(z) = z 2 . In 
this interpretation, when x and y are given the values 3 and —3 
respectively, the formula x' = y' is true while x = y is false, so that 
the formula {x' = y' — ► x = y) is false. Thus the formula 

Mx My (x' = y' —► x = y) is false in this interpretation. 

Let <p be the formula v = 0. Then the formula 3vv = 0 is true in the 
standard interpretation as there is indeed a natural number equal to 0 . 
But the formula Vv v = 0 is false in this interpretation as there are 
many natural numbers not equal to 0. So with this choice of (p , the 
formula (3u (p —> Mv<p) is false in the standard interpretation. Then by 
the Correctness Theorem it is not the case that h (3 v<p —► Mv<p). 


Any interpretation with domain U 
which interprets ' by a function 
/: U —* U which is not one-one 
will do. 


There are many other choices of cp 
and interpretations in which 
(3v cp —> Wvcp) is false. 
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Section 3 


1 Suppose that $ and *b are sentences such that b r ( < t > V \b), and that 
neither b T $ nor \- T 'b. Since T is complete, it follows that both b T -i<b 
and \~t -| ib. The formula ((^<f> & -’'b) — > —■ ( f I> V \b)) is a tautology and 
hence -■($ V '!') is a tautological consequence of the formulas and 

Thus b t -, (4> V \b). But b t ( < 3> V 4*), and so this contradicts the 
fact that T is consistent. We deduce that either b T $ or b T <3/. 

2 (a) As $ 1 , $ 2 i • • •, $* b \b, repeated use of the CP Rule gives 

b (*! -»($ 2 -»(••■-(**-» *)—))) 

(b) Suppose that *b is derivable from the theory T and that T has as 
axioms the set of sentences S, so that T = Th(S'). Then is 
derivable from assumptions 4q, <J> 2 ,in T. For 1 < i < k, 
since <bj is in Th(S’), it follows that there is a finite set of sentences 
from 5, say A», such that 

Aib-fq 

Also, from part (a), since $i, $ 2 ,..., b \b we also have that 
b(*i-»(* 2 -»(■••(**-►*) •••))) 

Thus by writing the formal proofs of A* b <b, : for each i, one under 
another, followed by the formal proof of 

b(*i -+ ($2 -(•••(**-» ¥)•••))), we can obtain a formal proof 
in which each of the formulas dq, $ 2 > ■ • •, and 
($i —> ($ 2 —>(■••—> (<b fc —» 1 b) • • •))) occur depending on 
assumptions only in 

Ai U A 2 U ■ - • U A*,. 

Now the formula \b is a tautological consequence of the formulas 
$i, $ 2 , • • •, and ($i -> ($2 -> (• • • ($* ■ •)))• Hence, by a 

single use of the Tautology Rule, we can derive *b depending on all 
the assumptions needed to derive these formulas, that is, on 
assumptions in the set Ai U A 2 U • • • U A fe . Since there are only 
finitely many assumptions in this set, it follows that 

Ai U A 2 U ■ • ■ U A fc b \b, 

so that »b is in Th(S), that is, \b is in T. 

3 We have already seen (in Example 3.7 of Unit 4 and in the solution to 
Additional Exercise 4(a) of Section 2 of this unit) that Q3 is not true in 
the interpretation given in Example 3.4 of Unit 4. Hence this 
interpretation is not an interpretation of the theory Q. 

In the solution to Problem 3.5(b) of Unit 4 , we showed that Q5 is true 
in this interpretation. In the solution to Additional Exercise 3(b) for 
Section 3 of Unit 4, we showed that Q7 is true in this interpretation. It 
is easy to check that the remaining axioms of Q, namely Q\, Q2, Q4 
and Q6, are true in this interpretation. 

Thus all the axioms of () other than Q3 are true in this interpretation. In fact it can be shown that no one 

Hence Q3 cannot be a logical consequence of the other axioms. of the axioms of Q is a logical 

consequence of the other six 
axioms. In this sense the axioms of 
Q are independent of one another. 
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4 We have seen in Example 3.2 that all the axioms of Q are true in the 
interpretation yf ** given in Example 3.6 of Unit 4 • Thus by the 
Correctness Theorem it will be sufficient to show that none of the given 
sentences is true in this interpretation. 

(a) For each element y of the interpretation JU** we have 

y + a' = y + a = /3, whereas a" = a! = a. Thus for any y there is 
an element x, namely x = a, with y + x' ^ x". Hence the sentence 
3y Vx (y + x') = x" is false in yU**. 

(b) We have a" 4- (3 = a' + 0 — a + p = a, whereas 
0+a'=l3+a = (3. Thus a” + (3 # 0 + a', and hence the sentence 
Mx \/y (x" + y) = (y' + x') is false in yU**. 

(c) For each element y of the interpretation: if y ^ a, we have 

y ■ a — a, and hence y ■ a ^ y, and, if y = a, we have a ■ 0 = 0 ^ a. 
So for each y there is some element x of the interpretation such 
that y ■ x ^ y. Hence the sentence 3y \fx (y • x) = y is false in yU**. 
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